Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-32576 EUVD-2026-92951GHSA-w3q3-cc4c-7jvm

WordPress Faktur Pro for WooCommerce plugin <= 3.2.2 - Insecure Direct Object References (IDOR) vulnerability

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Faktur Pro for WooCommerce: from n/a through 3.2.2.

Affected products

VendorProductAffectedFixed
ZWEISCHNEIDER Faktur Pro for WooCommerce ≤ 3.2.2 —

References