CVE-2026-1710 in woocommerce WooPayments Plugin
要約 (英語)
The WooPayments: Integrated WooCommerce Payments plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_upe_appearance_ajax' function in all versions up to, and including, 10.5.1. This makes it possible for unauthenticated attackers to update plugin settings.
責任者
Wordfence
予約する
2026年01月30日
公開
2026年03月31日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 354305 | woocommerce WooPayments Plugin Setting save_upe_appearance_ajax 特権昇格 | 285 | 未定義 | 公式な修正 | CVE-2026-1710 |