Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-24999 2 Almapay, Wordpress 2 Alma, Wordpress 2026-02-20 5.3 Medium
Missing Authorization vulnerability in Alma Alma alma-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Alma: from n/a through <= 5.16.1.
CVE-2023-50369 1 Almapay 1 Alma 2024-11-21 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alma Alma – Pay in installments or later for WooCommerce allows Stored XSS.This issue affects Alma – Pay in installments or later for WooCommerce: from n/a through 5.1.3.