CVE-2026-57425

MediumCVSS 6.5

Published: 23/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

Autopay dla WooCommerce plugin version 2.2.27 and earlier has a broken access control vulnerability without authentication. An unauthenticated attacker can gain unauthorized access.

Risk Assessment

The organization is at risk of unauthorized payment transactions and theft of financial data.

Recommendation

Immediately update the Autopay dla WooCommerce plugin to the latest version.

Other vulnerabilities in Autopay dla WooCommerce

CVE-2026-121571Medium
The Autopay dla WooCommerce plugin through version 2.3.0 contains a missing authorization vulnerability allowing exploitation of incorrectly configured access control security levels. The issue affects versions from n/a through 2.3.0.

Original NVD description (English source)

Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS