CVE-2026-52711

HighCVSS 7.5

Published: 16/06/2026(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile — higher than 31% of all known CVEs

WooCommerce POS versions up to 1.8.14 have an issue with unauthenticated access that allows for broken access control.

Organizations may be exposed to unauthorized access to sensitive data, potentially leading to data loss or unauthorized transactions.

It is recommended to update WooCommerce POS to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions.