CVE-2026-95597: WordPress 워드프레스 결제 심플페이 plugin <= 5.5.17 - Settings Change vulnerability

Q: Which installations are affected?

The issue affects codemstory PGall for WooCommerce (워드프레스 결제 심플페이) versions through 5.5.17. The available data does not identify a fixed version.

Q: Does exploiting this issue require authentication or user interaction?

No. The vector is network-accessible, with no privileges or user interaction required according to the supplied CVSS metrics.

Q: What could an attacker do?

The vulnerability permits unauthorized settings changes because of missing authorization and incorrectly configured access-control levels. The reported impact includes low integrity and availability impact, with no reported confidentiality impact.

Published Oct 9, 2026

Updated

Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through 5.5.17.

Affected Software

1 affected component

codemstory PGall for WooCommerce<=5.5.17

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce to a version that resolves this vulnerability.
Fixed in 5.5.18

Event History

Oct 9, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

The issue affects codemstory PGall for WooCommerce (워드프레스 결제 심플페이) versions through 5.5.17. The available data does not identify a fixed version.

Does exploiting this issue require authentication or user interaction?

No. The vector is network-accessible, with no privileges or user interaction required according to the supplied CVSS metrics.

What could an attacker do?

The vulnerability permits unauthorized settings changes because of missing authorization and incorrectly configured access-control levels. The reported impact includes low integrity and availability impact, with no reported confidentiality impact.

CVE-2026-95597: WordPress 워드프레스 결제 심플페이 plugin <= 5.5.17 - Settings Change vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

Does exploiting this issue require authentication or user interaction?

What could an attacker do?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

Does exploiting this issue require authentication or user interaction?

What could an attacker do?