Missing Authorization Vulnerability in WooCommerce Plugin by Viszt Péter
CVE-2026-81790

7.5HIGH

Key Information:

Vendor

WordPress
Status
Csomagpontok És Szállítási Címkék WooCommerce-hez
Vendor
CVE Published:
8 September 2026

What is CVE-2026-81790?

A missing authorization vulnerability in the Csomagpontok és szállítási címkék WooCommerce plugin by Viszt Péter allows attackers to exploit improperly configured access control security levels. This can potentially lead to unauthorized access to sensitive functions or data. Versions prior to 4.2.8 are impacted, emphasizing the importance of updating to ensure robust security measures are in place.

Affected Version(s)

Csomagpontok és szállítási címkék WooCommerce-hez < 4.2.8

References

https://patchstack.com/database/wordpress/plugin/hungaria...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peng Zhou | Patchstack Bug Bounty Program
.