High · 7.5 CVE-2026-39751 EUVD-2026-93260GHSA-24gg-q9vh-xg9v

WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Broken Access Control vulnerability

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack

Vendor: Payplug Product: PayPlug for WooCommerce (Official) Category: Web / CMS

Description

Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.

Affected products

Vendor	Product	Affected	Fixed
Payplug	PayPlug for WooCommerce (Official)	≤ 3.1.0	—

References

https://patchstack.com/database/wordpress/plugin/payplug/vulnerability/wordpress-payplug-for-woocommerce-official-plugin-3-1-0-broken-access-control-vulnerability?_s_id=cve vdb-entry