CVE-2026-110362: WordPress PlanetStudio Payment Gateway plugin <= 1.3.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlanetStudio Payment Gateway: from n/a through 1.3.3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
planetstudio-payment-gatewayto a version that resolves this vulnerability.Fixed in 1.3.4
Event History
Frequently Asked Questions
Which versions are affected?
PlanetStudio Payment Gateway versions through 1.3.3 are affected. The available information does not identify a fixed version.
Can this be exploited remotely without authentication?
Yes. The supplied vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the potential impact?
The vulnerability can allow unauthorized actions due to incorrectly configured access-control levels. The provided severity vector indicates integrity impact only, with no stated confidentiality or availability impact.