CVE-2026-107863
Received Received - Intake

Missing Authorization in Products Restricted Users for WooCommerce

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: Patchstack

Description
Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Products Restricted Users for WooCommerce: from n/a through 0.7.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-107863
EUVD
EUVD-2026-97296

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Codection Products Restricted Users for WooCommerce 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Missing Authorization issue in the Products Restricted Users for WooCommerce plugin. It allows attackers to exploit incorrectly configured access control security levels, potentially accessing restricted pages or performing unauthorized actions without proper authentication.

Detection Guidance

To detect this vulnerability, check if you are running Products Restricted Users for WooCommerce plugin version 0.7 or below. You can verify the installed version via WordPress admin panel under Plugins or by inspecting plugin files. No specific commands are provided in the context, but monitoring for unauthorized access to restricted pages or unusual user activity may indicate exploitation.

Impact Analysis

Unauthenticated users could view sensitive data of other users, such as personal information or restricted content. This may lead to privacy breaches or unauthorized access to protected areas of a WooCommerce store.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA by exposing personal or sensitive user data. Organizations may face legal penalties or reputational damage if such data breaches occur due to insufficient access controls.

Mitigation Strategies

Immediately update the Products Restricted Users for WooCommerce plugin to version 0.8 or later. If auto-updates are available, enable them for vulnerable plugins. Remove or disable the plugin if updates are not possible. Review access logs for suspicious activity and restrict unauthorized user access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107863. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart