Medium · 6.5 CVE-2026-49071 EUVD-2026-37614GHSA-jxhw-2h3q-q447

WordPress WooCommerce Dropshipping plugin <= 5.2.4 - Broken Authentication vulnerability

Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack

Vendor: OPMC Product: WooCommerce Dropshipping Category: Web / CMS

Description

Unauthenticated Broken Authentication in WooCommerce Dropshipping <= 5.2.4 versions.

Affected products

Vendor	Product	Affected	Fixed
OPMC	WooCommerce Dropshipping	≤ 5.2.4	—

References

https://patchstack.com/database/wordpress/plugin/woocommerce-dropshipping/vulnerability/wordpress-woocommerce-dropshipping-plugin-5-2-4-broken-authentication-vulnerability?_s_id=cve vdb-entry