← All advisories

Unrated severityNVD Advisory· Published Jul 2, 2026· Updated Jul 2, 2026

WordPress NOWPayments for WooCommerce plugin <= 1.4.0 - Broken Access Control vulnerability

CVE-2026-39448

Description

Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions.

Affected products

1

WordPress/NOWPayments for WooCommercellm-create
Range: <=1.4.0

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/nowpayments-for-woocommerce/vulnerability/wordpress-nowpayments-for-woocommerce-plugin-1-4-0-broken-access-control-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.