CVE-2026-39672

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

17th percentile - higher than 17% of all known CVEs

Summary

Missing Authorization vulnerability in ShipTime: Discounted Shipping Rates for WordPress up to version 1.1.1 allows exploiting incorrectly configured access control security levels.

Risk Assessment

Unauthorized users may access administrative functions, potentially leading to unauthorized changes in plugin configuration.

Recommendation

Update the ShipTime: Discounted Shipping Rates plugin to a version higher than 1.1.1 or apply appropriate security patches.

Original NVD description (English source)

Missing Authorization vulnerability in shiptime ShipTime: Discounted Shipping Rates shiptime-discount-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShipTime: Discounted Shipping Rates: from n/a through <= 1.1.1.