CVE-2026-108493 — WordPress Pay for Payment for WooCommerce plugin <= 3.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment allows Exploiting Incorrectly Configured Access Control S…
Published: 2026-10-13 · CVSS: 5.3 · CVSS 3.1
Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pay for Payment for WooCommerce: from n/a through 3.0.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7