CVE-2026-66692

MediumCVSS 4.3

Published: 06/08/2026(UTC)Updated: 12/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Summary

IDOR vulnerability in Colissimo Officiel: Méthodes de livraison pour WooCommerce versions up to 2.10.0 allows a customer to access other users' resources.

Risk Assessment

A customer can access other customers' data, compromising data confidentiality and integrity.

Recommendation

Update the plugin to the latest version that fixes the authorization issue.

Other vulnerabilities in Colissimo Officiel: Méthodes de livraison pour WooCommerce

CVE-2026-57341Medium
The Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin version 2.9.0 and below contains an unauthenticated Insecure Direct Object References (IDOR) vulnerability. This allows an attacker without authentication to access sensitive data or operations by manipulating object identifiers.

Original NVD description (English source)

Customer Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS