📋 الوصف الكامل

CVE ID :CVE-2026-111277 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Description :NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an order_id. Attackers can iterate the order_id parameter, which matches guest orders store