Security Advisory
CVE-2026-57677
9.8
CRITICAL
Vulnerability Description
Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions.
Published Date
July 2, 2026
Official Source
NIST NVD Advisory