CVE-2026-27330: CWE-862 Missing Authorization in Weptile Mobile App for WooCommerce

This vulnerability (CVE-2026-27330) affects the Weptile Mobile App for WooCommerce versions up to 0.4.62 and is classified as CWE-862 Missing Authorization. It allows unauthenticated attackers to bypass access controls, potentially leading to unauthorized access to sensitive information or functionality. The CVSS 3.1 base score is 8.6, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality (high), integrity (low), and availability (low). The vulnerability is published and tracked by Patchstack but lacks a disclosed remediation level or patch at this time.

Successful exploitation could allow unauthenticated attackers to gain unauthorized access to protected resources or functions within the mobile app, compromising confidentiality significantly and causing limited integrity and availability impacts. This could lead to exposure of sensitive data or unauthorized actions within the affected application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.