CVE-2026-49060: WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.4 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation.
This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.9.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Hippoo Mobile App for WooCommerce pluginto a version that resolves this vulnerability.Fixed in 1.9.5
Event History
Frequently Asked Questions
What is the severity of CVE-2026-49060?
The severity of CVE-2026-49060 is critical with a score of 9.8.
How do I fix CVE-2026-49060?
To fix CVE-2026-49060, update the WordPress Hippoo Mobile App for WooCommerce plugin to version 1.9.5 or later.
What type of vulnerability is CVE-2026-49060?
CVE-2026-49060 is a Privilege Escalation vulnerability.
Which versions of the Hippoo Mobile App for WooCommerce are affected by CVE-2026-49060?
CVE-2026-49060 affects Hippoo Mobile App for WooCommerce versions up to and including 1.9.4.
What can happen if CVE-2026-49060 is exploited?
Exploitation of CVE-2026-49060 can lead to unauthorized privilege escalation within the application.