PT-2026-132182
CVE-2026-115601
·
Published
2026-10-29
·
Updated
2026-10-29
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Custom Price for WooCommerce versions prior to 1.1.30
Description
This issue involves a missing authorization check within a function, which allows unauthenticated attackers to exploit incorrectly configured access control security levels and perform unauthorized actions.
Recommendations
Update Custom Price for WooCommerce to version 1.1.30 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾