Unauthenticated Write Vulnerability in PeproDev WooCommerce Receipt Uploader for WordPress
CVE-2026-14313
What is CVE-2026-14313?
The PeproDev WooCommerce Receipt Uploader plugin for WordPress is impacted by a serious vulnerability that allows unauthenticated users to perform unauthorized write operations. This missing authorization flaw enables potential attackers to exploit the system, posing significant security risks, especially for WooCommerce users relying on this plugin. As there is currently no patched version available, it is critical for site owners to assess their use of this plugin and implement necessary security measures to protect sensitive data.
Affected Version(s)
PeproDev WooCommerce Receipt Uploader 0 <= 2.8.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.