SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-57425

MEDIUM · CVSS 6.5 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-07-23 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The Autopay plugin for WooCommerce versions up to 2.2.27 is vulnerable to unauthenticated broken access control, allowing attackers to potentially access restricted functionalities without proper authentication. This could lead to unauthorized actions within the WooCommerce environment, impacting the integrity and security of e-commerce transactions. E-commerce site administrators using this plugin should prioritize patching or upgrading to mitigate the risk of exploitation.

CVE
CVE-2026-57425
Severity
MEDIUM
CVSS
6.5
EPSS
0.24%

Original NVD Description

Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions.