Authorization Bypass in PayPal Brasil para WooCommerce Plugin for WordPress

CVE-2026-76058

What is CVE-2026-76058?

The PayPal Brasil para WooCommerce plugin for WordPress contains an authorization bypass vulnerability that affects all versions up to and including 1.7.8. The flaw stems from inadequate verification of user permissions, which enables unauthenticated attackers to manipulate the PayPal Brasil BCDC payment gateway settings. This could lead to the disabling or enabling of the gateway, ultimately allowing unauthorized access to critical gateway configurations, potentially removing PayPal from the checkout process for all customers.

References