Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-95589 EUVD-2026-95623GHSA-fx9r-rw42-c776

WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Broken Access Control vulnerability

Published Oct 9, 2026 · Updated Oct 9, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n/a through 4.0.1.

Affected products

VendorProductAffectedFixed
Magepeople Deposits and Partial Payments for WooCommerce ≤ 4.0.1 —

References