CVE-2026-2582 | vendidero Germanized for WooCommerce Plugin up to 3.20.5 on WordPress Shortcode account_holder code injection

A vulnerability labeled as critical has been found in vendidero Germanized for WooCommerce Plugin up to 3.20.5 on WordPress. Affected is an unknown function of the component Shortcode Handler. Such manipulation of the argument account_holder leads to code injection.

This vulnerability is referenced as CVE-2026-2582. It is possible to launch the attack remotely. No exploit is available.