CVE-2026-27330: WordPress Mobile App for WooCommerce plugin <= 0.4.62 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Mobile App for WooCommerce <= 0.4.62 versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Mobile App for WooCommerceto a version that resolves this vulnerability.Fixed in 0.4.63
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior privileges to exploit an affected installation.
Which installations are affected?
Mobile App for WooCommerce versions 0.4.62 and earlier are identified as affected. The provided data does not state whether a particular default configuration or feature setting is required.
What is the potential impact?
The CVSS vector indicates network-reachable exploitation with low attack complexity and no user interaction. Successful exploitation may result in high confidentiality impact and low integrity and availability impact.