CVE-2026-107863: WordPress Products Restricted Users for WooCommerce plugin <= 0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Products Restricted Users for WooCommerce: from n/a through 0.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Codection Products Restricted Users for WooCommerceto a version that resolves this vulnerability.Fixed in 0.8
Event History
Frequently Asked Questions
Which installations are affected?
Products Restricted Users for WooCommerce versions through 0.7 are affected. The available data does not identify a fixed version.
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates that the issue is network-accessible and requires neither privileges nor user interaction.
What is the expected impact of successful exploitation?
The reported impact is limited to integrity, meaning an attacker may be able to make unauthorized modifications. No confidentiality or availability impact is indicated by the provided CVSS vector.