CVE-2026-110376

MediumCVSS 4.3

Published: 26/10/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

The VillaTheme DEPART plugin contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects DEPART from n/a through 1.0.10.

Risk Assessment

An unauthenticated or low privileged user may perform actions they should not be allowed to, potentially leading to unauthorized changes on the WordPress site.

Recommendation

Update the DEPART plugin to a version newer than 1.0.10 if available, and review user roles and access control configuration.

Other vulnerabilities in DEPART

CVE-2026-39592Medium
The DEPART plugin for WooCommerce lacks authorization, allowing an attacker to exploit incorrectly configured access control security levels.

Original NVD description (English source)

Missing Authorization vulnerability in VillaTheme DEPART depart-deposit-and-part-payment-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DEPART: from n/a through 1.0.10.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS