Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-14829

Checkimate <= 1.0.13 - Unauthenticated License Deactivation via Hardcoded Secret

Description

The Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through 1.0.13 does not properly restrict access to its license-management functionality, relying on a shared secret computed entirely from publicly available information, allowing unauthenticated attackers to deactivate the Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through 1.0.13's premium licensing state and erase the stored license key.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps

Default version status: unknown

  • 0 to ≤ 1.0.13affected

References