Live › vulnerability › CVE-2026-112827
The HANDMADE Dropshipping for Etsy and WooCommerce WordPress plugin is missing an authorization check, so access control is not enforced on some functions. A low-privileged or unauthenticated user could potentially perform actions reserved for store administrators, per the NVD description.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 11:24 UTC. All times on this page are UTC.
Sites running the HANDMADE Dropshipping for Etsy and WooCommerce plugin at version 1.0.10 or earlier. The sources do not describe which specific functions lack the check or what privilege is needed, so the exposure scope is unknown.
No product ranges from the sources yet.
wp-content/plugins/handmade-dropshipping-for-etsy-and-woo.1.0.10 are affected only up to that version; the sources do not state a fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce handmade-dropshipping-for-etsy-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HANDMADE – Dropshipping for Etsy and WooCommerce: from n/a through 1.0.10.
This page as .md · .json · in your agent: get_signal("CVE-2026-112827")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.