CVE-2026-31919: WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1 - Broken Access Control vulnerability

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges. Exploitation is network-accessible and does not require user interaction.

Q: What is the expected impact if exploited?

The issue has a low confidentiality impact, with no stated integrity or availability impact. It is classified as a missing authorization or incorrectly configured access-control issue.

Q: Which plugin versions are affected?

Advanced Coupons for WooCommerce Coupons is affected through version 4.7.1. The available data does not identify a fixed version.

Published Mar 13, 2026

Updated

Missing Authorization vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Coupons for WooCommerce Coupons: from n/a through <= 4.7.1.

Affected Software

2 affected components

Josh Kohlbach Advanced Coupons for WooCommerce Coupons<=4.7.1

wordpress/advanced-coupons-for-woocommerce-coupons<=4.7.1

Event History

Mar 13, 2026

CVE Published

via MITRE·11:41 AM

Data Sourced

via MITRE·11:41 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:54 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges. Exploitation is network-accessible and does not require user interaction.

What is the expected impact if exploited?

The issue has a low confidentiality impact, with no stated integrity or availability impact. It is classified as a missing authorization or incorrectly configured access-control issue.

Which plugin versions are affected?

Advanced Coupons for WooCommerce Coupons is affected through version 4.7.1. The available data does not identify a fixed version.

CVE-2026-31919: WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1 - Broken Access Control vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected impact if exploited?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected impact if exploited?

Which plugin versions are affected?