WC Nova Poshta Shipping – Integration of Nova Poshta delivery service for WooCommerce, CVE-2026-84836

CVE, Research URL: CVE-2026-84836
Home page URL: Security reports for WC Nova Poshta Shipping – Integration of Nova Poshta delivery service for WooCommerce
Application: WC Nova Poshta Shipping – Integration of Nova Poshta delivery service for WooCommerce
Published on: Sep 03, 2026
Research Description: Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.
Affected versions: max 1.22.3.
Status: vulnerable

WC Nova Poshta Shipping &#8211; Integration of Nova Poshta delivery service for WooCommerce, CVE-2026-84836