Access Control Flaw in WP EasyPay by WPExperts

CVE-2026-96449

What is CVE-2026-96449?

The WP EasyPay plugin by WPExperts suffers from a missing authorization vulnerability that allows attackers to exploit poorly configured access control security levels. This issue compromises the integrity of the application by enabling unauthorized access to certain features, which could lead to further exploitation or data leakage. Affected versions include all prior to and including 4.5.4. It is crucial for users to review their configurations and apply necessary updates to mitigate potential risks.

References