OPMC vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2026-49072WooCommerce Anti-Fraud (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-06-17CVE Database V5CVE-2026-49072 CVE-2026-49072 is a medium severity vulnerability in WooCommerce Anti-Fraud versions up to and including 7.2.6. It involves unauthenticated broken access control (CWE-862), allowing unauthorized users to perform actions that should require authorization. The vulnerability does not impact confidentiality but can lead to integrity and availability issues. No official patch or remediation guidance is currently confirmed from the vendor. EPSS 0.3%Vulnerability OPMC CWE-862	CVE Database V5	2026-06-17
Medium	6.5	EPSS 0.3%	CVE-2026-49071WooCommerce Dropshipping (WordPress plugin) · Authentication Bypass Using an Alternate Path or Channel Medium6.5EPSS 0.3%2026-06-17CVE Database V5CVE-2026-49071 CVE-2026-49071 is an authentication bypass vulnerability in OPMC WooCommerce Dropshipping versions up to and including 5.2.4. It allows unauthenticated attackers to bypass authentication mechanisms due to broken authentication controls. The vulnerability is classified under CWE-288 and has a medium severity with a CVSS score of 6.5. EPSS 0.3%Vulnerability OPMC CWE-288	CVE Database V5	2026-06-17
Medium	5.3	EPSS 0.3%	CVE-2024-35748WooCommerce Dropshipping (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2024-06-09CVE Database V5CVE-2024-35748 Missing Authorization vulnerability in OPMC WooCommerce Dropshipping.This issue affects WooCommerce Dropshipping: from n/a through 5.0.4. EPSS 0.3%Vulnerability OPMC CWE-862	CVE Database V5	2024-06-09

Page 1 of 1