Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-59536

WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Patchstack

Description

Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CoCart Headless CoCart – Headless ecommerce

Default version status: unaffected

  • n/a to ≤ 4.8.4affected

References