CVE-2026-110362

Deferred Deferred - Pending Action

Missing Authorization in PlanetStudio Payment Gateway

Publication date: 2026-10-15

Last updated on: 2026-10-16

Assigner: Patchstack

Description

Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlanetStudio Payment Gateway: from n/a through 1.3.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-15

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-16

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110362

EUVD

EUVD-2026-102302

Affected Vendors & Products

Vendor	Product	Version / Range
Planet	studio	PlanetStudio Payment Gateway 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

CVE-2026-110362 is a Missing Authorization vulnerability in the PlanetStudio Payment Gateway plugin for WordPress. It allows unauthenticated users to access restricted pages or perform unauthorized actions due to incorrectly configured access control security levels. The vulnerability affects versions up to and including 1.3.3.

Detection Guidance

To detect this vulnerability, check the installed version of the PlanetStudio Payment Gateway plugin. If it is version 1.3.3 or below, the system is vulnerable. Use commands like 'wp plugin list' in WordPress or inspect the plugin directory for version details.

Impact Analysis

This vulnerability could allow attackers to view sensitive data of other users, such as payment or personal information. It may also enable unauthorized actions on the affected website, potentially leading to data breaches or financial loss.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive user data, which may violate GDPR and HIPAA compliance requirements. Unauthorized data exposure risks non-compliance with data protection regulations due to potential breaches of confidentiality and integrity.

Mitigation Strategies

Immediately update the PlanetStudio Payment Gateway plugin to version 1.3.4 or later. If updating is not possible, disable the plugin temporarily or seek assistance from your hosting provider or developer.

Hi! I’m here to help you understand CVE-2026-110362. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70