CVE-2026-111835: WordPress BjornTech Swish for WooCommerce plugin <= 3.7.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in bjorntech BjornTech Swish for WooCommerce woo-swish-e-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BjornTech Swish for WooCommerce: from n/a through 3.7.8.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
BjornTech Swish for WooCommerceto a version that resolves this vulnerability.Fixed in 3.7.9
Event History
Frequently Asked Questions
Which installations are affected?
BjornTech Swish for WooCommerce installations running version 3.7.8 or an earlier affected version are impacted. The affected range is listed as through 3.7.8, with no lower bound specified.
Does exploitation require authentication or user interaction?
No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What impact could successful exploitation have?
The provided CVSS vector rates confidentiality and integrity impact as low, with no availability impact. The overall severity is medium, with a CVSS score of 6.5.