PT-2026-49401 · Datalogics+1 · Datalogics Ecommerce Delivery+1

CVE-2026-39583

·

Published

2026-04-08

·

Updated

2026-06-15

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Datalogics Ecommerce Delivery versions prior to 2.6.63
Description The Datalogics plugin for WordPress allows unauthenticated attackers to elevate their privileges to the level of an administrator.
Recommendations Update Datalogics Ecommerce Delivery to a version newer than 2.6.62.

Fix

Incorrect Privilege Assignment

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-39583

Affected Products

Datalogics Ecommerce Delivery
Datalogics