CVE-2026-28180

Unauthenticated Insecure Direct Object References (IDOR) vulnerabilities in Mercado Pago payments for WooCommerce versions up to 8.9.0 allow attackers to access or manipulate sensitive data by directly referencing objects without proper authorization. This could lead to unauthorized transactions or data exposure, impacting the integrity and confidentiality of payment information. E-commerce platforms utilizing affected versions should prioritize patching to mitigate potential exploitation risks.