CVE-2026-81790
Received Received - Intake

Missing Authorization in Csomagpontok és szállítási címkék WooCommerce

Publication date: 2026-09-08

Last updated on: 2026-09-08

Assigner: Patchstack

Description
Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Csomagpontok és szállítási címkék WooCommerce-hez: from n/a before 4.2.8.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-08
Last Modified
2026-09-08
Generated
2026-09-08
AI Q&A
2026-09-08
EPSS Evaluated
N/A
NVD
CVE-2026-81790
EUVD
EUVD-2026-72649

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Missing Authorization vulnerability in the WooCommerce plugin 'Csomagpontok és szállítási címkék WooCommerce-hez'. It allows unauthenticated users to perform privileged actions due to missing authorization checks, enabling exploitation of incorrectly configured access control security levels.

Detection Guidance

Detecting this vulnerability requires checking the installed version of the 'Csomagpontok és szállítási címkék WooCommerce-hez' plugin. If the version is below 4.2.8, the system is vulnerable. No specific commands are provided in the context, but monitoring for unauthorized privileged actions or unusual plugin behavior may help.

Impact Analysis

The vulnerability can allow attackers to perform unauthorized privileged actions on affected websites. With a CVSS score of 7.5, it poses a high risk of exploitation in mass campaigns targeting thousands of websites, potentially leading to data breaches or unauthorized modifications.

Mitigation Strategies

Immediately update the 'Csomagpontok és szállítási címkék WooCommerce-hez' plugin to version 4.2.8 or later. If an update is not immediately possible, apply Patchstack's automatic mitigation rule to block attacks until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-81790. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart