High · 8.2 CVE-2026-49065 EUVD-2026-36872GHSA-592f-74mm-m922

WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability

Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack

Vendor: hippooo Product: Hippoo Mobile App for WooCommerce Category: Web / CMS

Description

Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce <= 1.9.5 versions.

Affected products

Vendor	Product	Affected	Fixed
hippooo	Hippoo Mobile App for WooCommerce	≤ 1.9.5	—

References

https://patchstack.com/database/wordpress/plugin/hippoo/vulnerability/wordpress-hippoo-mobile-app-for-woocommerce-plugin-1-9-5-broken-access-control-vulnerability?_s_id=cve vdb-entry