CVE-2026-106609

Summary

This vulnerability allows attackers to bypass authorization controls in the Bayarcash WooCommerce plugin, enabling them to perform actions they shouldn't be able to access. The flaw occurs due to incorrectly configured access control security levels.

Exploitability

Exploitation is relatively straightforward with no special preconditions required, as the vulnerability affects unauthenticated users and allows for unauthorized modifications.

Blast radius

If exploited, attackers could modify payment configurations or transaction data in the WooCommerce store, potentially leading to financial discrepancies or unauthorized access to payment processing features.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 4.4.3 or later to address the missing authorization vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.