CVE Catalog
CVE-2026-39592
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.17%
6th percentile - higher than 6% of all known CVEs
Summary
The DEPART plugin for WooCommerce lacks authorization, allowing an attacker to exploit incorrectly configured access control security levels.
Risk Assessment
Risk of unauthorized access to administrative functions or data, potentially leading to privilege escalation.
Recommendation
Update the DEPART plugin to the latest version.
Original NVD description (English source)
Missing Authorization vulnerability in Andy Ha DEPART depart-deposit-and-part-payment-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DEPART: from n/a through <= 1.0.7.