Medium · 5.3 CVE-2026-57760 EUVD-2026-41324GHSA-92qf-5wrq-7gjm

WordPress Sendcloud Shipping plugin <= 1.0.29 - Broken Access Control vulnerability

Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Sendcloud Shipping: from n/a through 1.0.29.

Vendor	Product	Affected	Fixed
Sendcloud	Sendcloud Shipping	≤ 1.0.29	—