What is CVE-2026-1982?

CVE-2026-1982 is a medium-severity vulnerability in Mohammadr3z المنتور فارسی, classified under CWE-472. CVSS score: 5.3/10. Published 2026-07-30.

How severe is CVE-2026-1982?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Mohammadr3z المنتور فارسی

CVE-2026-1982

The Persian Elementor (المنتور فارسی) plugin for WordPress is vulnerable to Price Manipulation in all versions up to, and including, 2.8.1. This is due to the plugin trusting a user-supplied payment amount without server-side validation against the configured ZarinPal widget price. This makes it possible for unauthenticated attackers to submit arbitrary payment amounts to the ZarinPal gateway via the 'amount' parameter.

EPSS: 0.002 (9.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Mohammadr3z المنتور فارسی — versions 0

Weakness classification (CWE)

CWE-472

References

Frequently asked questions

What is CVE-2026-1982?: CVE-2026-1982 is a medium-severity vulnerability in Mohammadr3z المنتور فارسی, classified under CWE-472. CVSS score: 5.3/10. Published 2026-07-30.
How severe is CVE-2026-1982?: Medium severity. CVSS v3 base score is 5.3 out of 10.