CVE-2026-111835
Deferred Deferred - Pending Action

Missing Authorization in BjornTech Swish for WooCommerce

Publication date: 2026-10-21

Last updated on: 2026-10-21

Assigner: Patchstack

Description
Missing Authorization vulnerability in bjorntech BjornTech Swish for WooCommerce woo-swish-e-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BjornTech Swish for WooCommerce: from n/a through 3.7.8.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-21
Last Modified
2026-10-21
Generated
2026-11-10
AI Q&A
2026-10-21
EPSS Evaluated
2026-11-09
NVD
CVE-2026-111835
EUVD
EUVD-2026-107280

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
bjorntech BjornTech Swish for WooCommerce 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Missing Authorization issue in the BjornTech Swish for WooCommerce plugin. It allows attackers to exploit incorrectly configured access control security levels, enabling unauthorized access to restricted pages or actions without proper authentication.

Detection Guidance

To detect this vulnerability, check if your WooCommerce Swish plugin version is 3.7.8 or below. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin files for version details. Monitor for unauthorized access attempts or unusual activity in logs.

Impact Analysis

Unauthenticated users could access sensitive data or perform unauthorized actions on affected websites. This may lead to data breaches, financial loss, or reputational damage. The vulnerability is actively exploitable and could be used in widespread attacks.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA compliance requirements. Organizations may face legal penalties, fines, or regulatory actions due to data exposure or unauthorized access incidents.

Mitigation Strategies

Update the BjornTech Swish for WooCommerce plugin to version 3.7.9 or later immediately to patch the vulnerability. Alternatively, apply mitigation measures such as Patchstack's auto-update or vulnerability blocking rules to prevent attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111835. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...