CVE-2026-121571: WordPress Autopay dla WooCommerce plugin <= 2.3.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Desk Autopay dla WooCommerce pay-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autopay dla WooCommerce: from n/a through 2.3.0.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Autopay dla WooCommerceto a version that resolves this vulnerability.Fixed in 2.3.1
Event History
Frequently Asked Questions
Which installations are affected?
The issue affects the WP Desk Autopay dla WooCommerce plugin (pay-wp) through version 2.3.0. The available data does not identify a fixed version.
What is known about exploitation requirements and impact?
The available information identifies this as a missing-authorization issue caused by incorrectly configured access-control security levels. It does not specify the required attacker privileges, affected functionality, or concrete impact.