CVE-2026-66692: WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Insecure Direct Object References (IDOR) vulnerability

Published Aug 6, 2026

Updated

Customer Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions.

Affected Software

1 affected component

WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce<=2.10.0

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce Plugin to a version that resolves this vulnerability.
Fixed in 3.0.0

Aug 6, 2026

CVE Published

via MITRE·02:28 PM

Data Sourced

via MITRE·02:28 PM

RemedyDescriptionSeverityWeakness

CVE-2026-66692 has a medium severity rating of 4.3.

To fix CVE-2026-66692, update the Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin to the latest version.

CVE-2026-66692 may allow attackers to exploit insecure direct object references to access unauthorized customer data.

CVE-2026-66692 affects versions of the Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin up to and including 2.10.0.

Yes, CVE-2026-66692 is classified as an active vulnerability that needs to be addressed to prevent exploitation.