Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.2%	CVE-2026-106609Bayarcash WooCommerce · Missing Authorization High7.5EPSS 0.2%2026-10-10CVE Database V5CVE-2026-106609 CVE-2026-106609 is a high-severity vulnerability in the Bayarcash WooCommerce plugin by Web Impian. It involves missing authorization controls, allowing unauthorized users to exploit incorrectly configured access control security levels. This affects versions from initial releases up to 4.4.2 inclusive. The vulnerability does not impact confidentiality but allows unauthorized modification of data, with no impact on availability. No known exploits are reported in the wild, and no official patch information is provided. EPSS 0.2%Vulnerability Web Impian	CVE Database V5	2026-10-10
Medium	5.3	EPSS 0.3%	CVE-2026-24606Bayarcash WooCommerce · Missing Authorization Medium5.3EPSS 0.3%2026-01-23CVE Database V5CVE-2026-24606 Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through <= 4.3.13. EPSS 0.3%Vulnerability Web Impian	CVE Database V5	2026-01-23

Showing 1–3 of 3 results · 1 duplicate CVE record merged