CVE-2026-39751

HighCVSS 7.5

Published: 06/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

Summary

A vulnerability in the PayPlug for WooCommerce (Official) plugin up to version 3.1.0 allows an unauthenticated attacker to exploit broken access control.

Risk Assessment

An unauthenticated attacker can gain unauthorized access to administrative functions, potentially leading to data integrity compromise or plugin takeover.

Recommendation

Update the PayPlug plugin to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in PayPlug for WooCommerce

CVE-2026-42637Medium
The vulnerability allows an unauthenticated attacker to change settings in the PayPlug for WooCommerce (Official) plugin in versions up to and including 3.1.0.

Original NVD description (English source)

Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS