High · 7.5 CVE-2026-65504 EUVD-2026-53962GHSA-ffpf-wgph-c46w

WordPress BOX NOW Delivery Croatia plugin <= 3.3.0 - Broken Access Control vulnerability

Published Aug 6, 2026 · Updated Aug 6, 2026 · Assigned by Patchstack

Vendor: ivanbebek Product: BOX NOW Delivery Croatia

Description

Unauthenticated Broken Access Control in BOX NOW Delivery Croatia <= 3.3.0 versions.

Affected products

Vendor	Product	Affected	Fixed
ivanbebek	BOX NOW Delivery Croatia	≤ 3.3.0	—

References

https://patchstack.com/database/wordpress/plugin/box-now-delivery-croatia/vulnerability/wordpress-box-now-delivery-croatia-plugin-3-3-0-broken-access-control-vulnerability?_s_id=cve vdb-entry