CVE-2026-39716

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

The Flipmart plugin for WordPress (versions up to 2.8) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Risk Assessment

An attacker can gain unauthorized access to administrative functions or data, potentially leading to site takeover.

Recommendation

Update the Flipmart plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Missing Authorization vulnerability in CKThemes Flipmart flipmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flipmart: from n/a through <= 2.8.