CVE-2026-93949: WordPress Grocery Shopping Store theme <= 1.3.3 - Broken Authentication vulnerability
Published Oct 10, 2026
·Updated
Authentication Bypass Using an Alternate Path or Channel vulnerability in Omegathemes Grocery Shopping Store grocery-shopping-store allows Password Recovery Exploitation.This issue affects Grocery Shopping Store: from n/a through 1.3.3.
Affected Software
1 affected component
Omegathemes Grocery Shopping Store<=1.3.3
Event History
Oct 10, 2026
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability has network attack vector, low attack complexity, and requires low privileges. No user interaction is required.
2
What is the potential impact of successful exploitation?
Successful exploitation may allow password recovery abuse, resulting in high availability impact and low integrity impact. No confidentiality impact is indicated by the provided severity vector.
3
Which versions are affected?
Grocery Shopping Store versions through 1.3.3 are affected. The provided data does not identify a fixed version.