CVE-2026-118407 | Premium Packages Plugin up to 7.3.0 on WordPress order identifier authorization

November 4, 2026 Yanac

A vulnerability categorized as critical has been discovered in Premium Packages Plugin up to 7.3.0 on WordPress. This issue affects some unknown processing. Executing a manipulation of the argument order identifier can lead to authorization bypass.

The identification of this vulnerability is CVE-2026-118407. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More