CVE-2026-103337

MediumCVSS 6.5

Published: 05/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Ukraine Shipping: from n/a through 1.23.2.

Risk Assessment

The risk is the possibility of unauthorized access to functions or data, which could compromise confidentiality or integrity of the system.

Recommendation

It is recommended to update the WC Ukraine Shipping plugin to a patched version and review access control configurations.

Other vulnerabilities in WC Ukraine Shipping

CVE-2026-84836High
Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping versions up to 1.22.3.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS