PatchSiren

Mercado Pago CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Mercado Pago CVE published 2026-08-06

CVE-2026-28180

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-06T15:16:53.937Z and has not been modified since then. CVE-2026-28180 is an unauthenticated Insecure Direct Object References (IDOR) vulnerability in the Mercado Pago payments for WooCommerce plugin versions <= 8.9.0. This vulnerability can be exploited by attackers to access sensitive payment infor [truncated]