CVE-2026-103080: WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerability
External Control of Assumed-Immutable Web Parameter vulnerability in VillaTheme Salevo woo-boost-sales allows Input Data Manipulation.This issue affects Salevo: from n/a through 1.3.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
VillaTheme Salevo woo-boost-salesto a version that resolves this vulnerability.Fixed in 1.3.1
Event History
Frequently Asked Questions
Which installations are affected?
VillaTheme Salevo (woo-boost-sales) versions through 1.3.0 are affected. The provided data does not identify a fixed version.
Can this be exploited remotely without an account?
Yes. The vector is network-based, attack complexity is low, and the vulnerability metrics indicate no privileges or user interaction are required.
What is the likely security impact?
The reported impact is limited to integrity, meaning an attacker may be able to manipulate input data or alter affected data or behavior. No confidentiality or availability impact is identified.