The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Woocommerce Germanized Plugin | — | Update woocommerce-germanized plugin to version 3.20.6, or a newer patched version | Apr 30, 2026 | Apr 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub