Authorization Bypass in InfusedWoo Pro Plugin for WordPress

CVE-2026-6512

What is CVE-2026-6512?

The InfusedWoo Pro plugin for WordPress is susceptible to an authorization bypass vulnerability that allows unauthorized users to perform critical actions. Specifically, this flaw affects all versions up to and including 5.1.2, enabling attackers to delete arbitrary content such as posts, pages, products, or orders without proper authentication. Additionally, an attacker can mass-delete comments across any post and alter the status of posts, posing significant risks to website integrity and user data.

References