Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-39477 EUVD-2026-20144GHSA-8f6m-3c4p-c477

WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack