Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-1710 2 Woocommerce, Wordpress 2 Woopayments: Integrated Woocommerce Payments, Wordpress 2026-03-31 6.5 Medium
The WooPayments: Integrated WooCommerce Payments plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_upe_appearance_ajax' function in all versions up to, and including, 10.5.1. This makes it possible for unauthenticated attackers to update plugin settings.