CVE-2026-112839: WordPress Customer Coupons for WooCommerce plugin <= 1.3.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Coupons for WooCommerce: from n/a through 1.3.14.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
VillaTheme Customer Coupons for WooCommerce (woo-customer-coupons)to a version that resolves this vulnerability.Fixed in 1.3.15
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs authenticated access with low-level privileges. The vulnerability is remotely reachable and does not require user interaction.
What security impact is documented?
The documented impact is unauthorized modification of data or settings. No confidentiality or availability impact is listed.
Which plugin versions are affected?
Customer Coupons for WooCommerce versions through 1.3.14 are affected. The available data does not identify a fixed version.