CVE-2026-85010Suited to automated attack · CISA
RestroPress < 3.4.6 - Unauthenticated Price Manipulation via Cart Add-ons
CVSS score
5.3
EPSS probability
%0.3
Risk score
0.0
Published
24 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.5
CVE-2026-96537
Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite
U
Patch status unknown
7.1
CVE-2026-74920
Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute
U
Patch status unknown
5.4
CVE-2026-97315
Responsive Blocks < 2.3.0 - Unauthenticated HTML Injection in Form Notification Email
U
Patch status unknown
5.3
CVE-2026-92429
Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit Webhook
U
Patch status unknown
5.3
CVE-2026-92428
Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure Webhook
U
Patch status unknown
5.3
CVE-2026-88998
Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via 2Checkout IPN
U
Patch status unknown
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-85010"