CVE-2026-121571

WordPress Autopay dla WooCommerce plugin <= 2.3.0 - Broken Access Control vulnerability

Published 7 Nov 2026 • Updated 7 Nov 2026

Severity: MEDIUM

Description

Missing Authorization vulnerability in WP Desk Autopay dla WooCommerce pay-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autopay dla WooCommerce: from n/a through 2.3.0.

Affected products (1)

• WP Desk Autopay dla WooCommerce

Problem types

• Missing Authorization

References (1)

• https://patchstack.com/database/wordpress/plugin/pay-wp/vulnerability/wordpress-autopay-dla-woocommerce-plugin-2-3-0-broken-access-control-vulnerability?_s_id=cve