CVE-2026-95589: WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Broken Access Control vulnerability

Q: Who can exploit this issue?

The vector is network-accessible and exploitation requires low privileges. No user interaction is required.

Q: What is the likely security impact?

The vulnerability can affect integrity, while confidentiality and availability are not indicated as affected. It is classified as a broken access control issue involving incorrectly configured access-control security levels.

Q: Which plugin versions are affected?

Deposits and Partial Payments for WooCommerce is affected through version 4.0.1. The available data does not identify a fixed version.

Published Oct 9, 2026

Updated

Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n/a through 4.0.1.

Affected Software

1 affected component

MagePeople Deposits and Partial Payments for WooCommerce<=4.0.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Deposits and Partial Payments for WooCommerce to a version that resolves this vulnerability.
Fixed in 4.0.12

Event History

Oct 9, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vector is network-accessible and exploitation requires low privileges. No user interaction is required.

What is the likely security impact?

The vulnerability can affect integrity, while confidentiality and availability are not indicated as affected. It is classified as a broken access control issue involving incorrectly configured access-control security levels.

Which plugin versions are affected?

Deposits and Partial Payments for WooCommerce is affected through version 4.0.1. The available data does not identify a fixed version.

CVE-2026-95589: WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Broken Access Control vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the likely security impact?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely security impact?

Which plugin versions are affected?