Live › vulnerability › CVE-2026-112839
Go to dashboardCustomer Coupons for WooCommerce, a WordPress plugin by VillaTheme, has a missing authorization check on some function. The sources say an attacker can exploit incorrectly configured access control, but do not name the exact action or data gained.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 18:31 UTC. All times on this page are UTC.
Sites running Customer Coupons for WooCommerce or earlier are in the affected range. The sources do not say which role or configuration is needed to reach the flaw, so the exposure of a given site is unknown.
1.3.14No product ranges from the sources yet.
wp plugin get woo-customer-coupons --field=version1.3.14 (the sources name no fixed version)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Coupons for WooCommerce: from n/a through 1.3.14.
This page as .md · .json · in your agent: get_signal("CVE-2026-112839")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.