Medium · 5.3 CVE-2026-108493 EUVD-2026-98352GHSA-7h2h-j55f-6vmr

WordPress Pay for Payment for WooCommerce plugin <= 3.0.1 - Broken Access Control vulnerability

Published Oct 13, 2026 · Updated Oct 13, 2026 · Assigned by Patchstack

Vendor: Karolína Vyskočilová Product: Pay for Payment for WooCommerce Category: Web / CMS

Description

Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pay for Payment for WooCommerce: from n/a through 3.0.1.

Affected products

Vendor	Product	Affected	Fixed
Karolína Vyskočilová	Pay for Payment for WooCommerce	≤ 3.0.1	—

References

https://patchstack.com/database/wordpress/plugin/woocommerce-pay-for-payment/vulnerability/wordpress-pay-for-payment-for-woocommerce-plugin-3-0-1-broken-access-control-vulnerability?_s_id=cve vdb-entry