CVE-2026-84836

HighCVSS 7.1

Published: 03/09/2026(UTC)Updated: 03/09/2026(UTC)Translated: 03/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

13th percentile - higher than 13% of all known CVEs

Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping versions up to 1.22.3.

Subscribers could access other users' objects, potentially leading to data disclosure or unauthorized modifications.

Update to the latest version and implement object-level access controls.

Original NVD description (English source)

Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS