CVE-2026-66431

HighCVSS 7.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

Unauthenticated Broken Access Control vulnerability in Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) versions up to 1.0.7.

Risk Assessment

An unauthenticated attacker may gain unauthorized access to administrative functions, potentially leading to data integrity and confidentiality breaches.

Recommendation

Update the plugin to the latest available version that includes the security fix.

Original NVD description (English source)

Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) <= 1.0.7 versions.