Medium · 6.5 CVE-2026-73399 EUVD-2026-60805GHSA-hr72-fw54-f9pq

WordPress Flutterwave WooCommerce plugin <= 3.3.0 - Broken Authentication vulnerability

Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack

Vendor: flutterwave Product: Flutterwave WooCommerce Category: Web / CMS

Description

Unauthenticated Broken Authentication in Flutterwave WooCommerce <= 3.3.0 versions.

Affected products

Vendor	Product	Affected	Fixed
flutterwave	Flutterwave WooCommerce	≤ 3.3.0	—

References

https://patchstack.com/database/wordpress/plugin/rave-woocommerce-payment-gateway/vulnerability/wordpress-flutterwave-woocommerce-plugin-3-3-0-broken-authentication-vulnerability?_s_id=cve vdb-entry