CVE-2026-110376: WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability

Q: What level of access does an attacker need to exploit this issue?

The vulnerability requires low-level privileges (PR:L). It does not require user interaction and can be exploited over the network.

Q: What is the potential impact if exploitation succeeds?

The issue can affect integrity, meaning an attacker may be able to make unauthorized changes. No confidentiality or availability impact is identified in the provided severity vector.

Q: Which DEPART versions are affected?

DEPART versions through 1.0.10 are affected. The available information does not identify a fixed version.

Published Oct 26, 2026

Updated

Missing Authorization vulnerability in VillaTheme DEPART depart-deposit-and-part-payment-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DEPART: from n/a through 1.0.10.

Affected Software

1 affected component

Villatheme DEPART<=1.0.10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress DEPART plugin to a version that resolves this vulnerability.
Fixed in 1.1.0

Event History

Oct 26, 2026

CVE Published

via MITRE·08:47 AM

Data Sourced

via MITRE·08:47 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability requires low-level privileges (PR:L). It does not require user interaction and can be exploited over the network.

What is the potential impact if exploitation succeeds?