Medium · 6.5 CVE-2026-57340 EUVD-2026-40111GHSA-fvhx-wf6j-vcv7

WordPress Japanized For WooCommerce plugin <= 2.9.12 - Broken Access Control vulnerability

Published Jun 29, 2026 · Updated Jun 29, 2026 · Assigned by Patchstack

Vendor: shoheitanaka Product: Japanized for WooCommerce Category: Web / CMS

Description

Unauthenticated Broken Access Control in Japanized For WooCommerce <= 2.9.12 versions.

Affected products

Vendor	Product	Affected	Fixed
shohei.tanaka	Japanized For WooCommerce	≤ 2.9.12	—

References

https://patchstack.com/database/wordpress/plugin/woocommerce-for-japan/vulnerability/wordpress-japanized-for-woocommerce-plugin-2-9-12-broken-access-control-vulnerability?_s_id=cve vdb-entry