CVE-2026-109231 | vendidero Germanized Plugin up to 4.1.4 on WordPress Activation Token Logic /my-account/edit-account customer_account_activate improper authorization

October 31, 2026 Yanac

A vulnerability, which was classified as critical, has been found in vendidero Germanized Plugin up to 4.1.4 on WordPress. Affected is the function customer_account_activate of the file /my-account/edit-account of the component Activation Token Logic. Performing a manipulation results in improper authorization.

This vulnerability is cataloged as CVE-2026-109231. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More