High · 7.5 CVE-2026-45209 EUVD-2026-31770GHSA-9p39-xj39-27fr

WordPress MyCryptoCheckout plugin <= 2.161 - Broken Access Control vulnerability

Published May 25, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects MyCryptoCheckout: from n/a through 2.161.

Vendor	Product	Affected	Fixed
edward_plainview	MyCryptoCheckout	≤ 2.161	—