Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-29006 EUVD-2025-17185GHSA-v887-v4v9-fw53

WordPress Direct Checkout for WooCommerce Lite plugin <= 1.0.3 - Broken Access Control Vulnerability

Published Jun 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in centangle Direct Checkout for WooCommerce Lite woo-direct-checkout-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Direct Checkout for WooCommerce Lite: from n/a through <= 1.0.3.

Affected products

VendorProductAffectedFixed
centangle Direct Checkout for WooCommerce Lite ≤ 1.0.3 —

References