CVE-2026-32578

ECPay Ecommerce for WooCommerce versions up to 1.1.2606090 are vulnerable to broken access control, allowing unauthorized users to access restricted subscriber functionalities. This flaw could lead to data exposure or manipulation, significantly impacting the security of customer information and transactions. E-commerce operators using affected versions should prioritize remediation to protect their systems and customer data.