{"vulnerability": "cve-2026-104118", "sightings": [{"uuid": "371f6073-4dbe-4343-b203-189c1dbf6dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104118", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwzzdfei3q2w", "content": "CVE-2026-104118: The Razorpay for WooCommerce WordPress plugin before 4.8.8 lacks authorization checks on a checkout REST API route, letting unauthenticated attackers change shipping details on arbitrary orders. Update to 4.8.8. No exploitation confirmed.", "creation_timestamp": "2026-10-04T08:48:03.564237Z"}]}