CVE-2026-39751

PayPlug for WooCommerce versions up to 3.1.0 are vulnerable to unauthenticated broken access control, allowing attackers to gain unauthorized access to sensitive functionalities. This flaw could lead to unauthorized transactions or data exposure, posing a significant risk to e-commerce operations. Merchants using affected versions should prioritize immediate updates to mitigate potential exploitation.