Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-97259 EUVD-2026-89960GHSA-p263-vqc6-hg4w

WordPress Pay with Vipps for WooCommerce plugin <= 6.2.4 - Insecure Direct Object References (IDOR) vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.4.

Affected products

VendorProductAffectedFixed
WP Hosting AS Pay with Vipps for WooCommerce ≤ 6.2.4 —

References