CVE-2026-66461

HighCVSS 7.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

Unauthenticated Broken Access Control vulnerability in SMEPay: UPI Gateway for WooCommerce versions up to 1.0.5.

Risk Assessment

An unauthenticated attacker may gain unauthorized access to administrative functions, potentially leading to data integrity and confidentiality breaches.

Recommendation

Update the plugin to the latest available version that includes the security fix.

Original NVD description (English source)

Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce <= 1.0.5 versions.