Live › vulnerability › CVE-2026-115601
Custom Price for WooCommerce, a WordPress plugin by WP Desk, has a missing authorization check, so access controls are not enforced as intended. The sources do not say what data or actions an attacker gets beyond bypassing those controls.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 15:25 UTC. All times on this page are UTC.
WordPress sites running the Custom Price for WooCommerce plugin up to version 1.1.29 are in scope. The sources do not describe the specific configuration or role needed to trigger it.
No product ranges from the sources yet.
custom-price-for-woocommerce in the WordPress admin plugin list.1.1.29 are affected; move to a later version (the fixed version is unknown from the sources).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Price for WooCommerce: from n/a through 1.1.29.
This page as .md · .json · in your agent: get_signal("CVE-2026-115601")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.