CVE-2026-97259

MediumCVSS 5.3

Published: 30/09/2026(UTC)Updated: 30/09/2026(UTC)Translated: 30/09/2026(UTC)NVD NIST

Summary

Authorization bypass through user-controlled key vulnerability in Pay with Vipps for WooCommerce allows exploiting incorrectly configured access control security levels. Affects versions from n/a through 6.2.4.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to functions or data, potentially leading to security compromise of the WooCommerce store.

Recommendation

Update the Pay with Vipps for WooCommerce plugin to a version newer than 6.2.4 if a fix is available.

Other vulnerabilities in Pay with Vipps for WooCommerce

CVE-2026-94568High
The Pay with Vipps for WooCommerce plugin (up to version 6.2.0) contains a deserialization of untrusted data vulnerability allowing Object Injection. An attacker can supply malicious data that is deserialized by the application.

Original NVD description (English source)

Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS