Place Order Without Payment for WooCommerce, CVE-2025-26933

CVE, Research URL: CVE-2025-26933
Home page URL: Security reports for Place Order Without Payment for WooCommerce
Application: Place Order Without Payment for WooCommerce
Published on: Mar 10, 2025
Research Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Nitin Prakash WC Place Order Without Payment allows PHP Local File Inclusion. This issue affects WC Place Order Without Payment: from n/a through 2.6.7.
Affected versions: max 2.6.8.
Status: vulnerable