CVE-2026-32578: CWE-862 Missing Authorization in techsupport ECPay Ecommerce for WooCommerce

This vulnerability, identified as CWE-862 (Missing Authorization), affects ECPay Ecommerce for WooCommerce versions up to 1.1.2606090. It allows users with limited privileges (PR:L) to perform unauthorized actions without user interaction (UI:N) over a network (AV:N). The impact includes no confidentiality loss but integrity is compromised and availability can be affected, resulting in a high severity rating with a CVSS score of 7.1. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

The vulnerability allows unauthorized actions by users with limited privileges, potentially leading to integrity violations and denial of service conditions. Confidentiality is not impacted. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to affected versions and monitor for suspicious activities related to privilege misuse.