CVE-2026-96818

The WP Express Checkout plugin versions up to 2.4.9 are vulnerable to unauthenticated broken access control, allowing attackers to potentially exploit this weakness to gain unauthorized access to sensitive functionalities. This could lead to unauthorized transactions or data exposure, posing significant risks to e-commerce operations. Organizations using this plugin should prioritize patching or upgrading to mitigate the risk of exploitation.