CVE-2026-59528

HighCVSS 7.5

Published: 27/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

35th percentile - higher than 35% of all known CVEs

Summary

The ShipTime: Discounted Shipping Rates plugin version 1.1.1 and earlier allows a user with the Subscriber role to access sensitive data without proper permissions.

Risk Assessment

Risk of unauthorized access to confidential information by low-privileged users, potentially compromising data security.

Recommendation

Update the ShipTime: Discounted Shipping Rates plugin to a version later than 1.1.1.

Other vulnerabilities in ShipTime: Discounted Shipping Rates

CVE-2026-39672Medium
Missing Authorization vulnerability in ShipTime: Discounted Shipping Rates for WordPress up to version 1.1.1 allows exploiting incorrectly configured access control security levels.

Original NVD description (English source)

Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS