Unrated severityNVD Advisory· Published Nov 7, 2026
CVE-2026-122001
CVE-2026-122001
Description
The Komfortkasse for WooCommerce WordPress plugin before 1.4.9 does not properly validate the authenticity of REST API requests, overriding WordPress's own nonce verification so that a request forged in a logged-in administrator's browser is accepted, which can be used to create a new administrator account and fully take over the site.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <1.4.9
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.