CVE-2026-39448 — WordPress NOWPayments for WooCommerce plugin <= 1.4.0 - Broken Access Control vulnerability

CVE-2026-39448

WordPress NOWPayments for WooCommerce plugin <= 1.4.0 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions.

Vendor / product	Versions
CoderPress / NOWPayments for WooCommerce	affected n/a through 1.4.0

CWE-862

CISA-ADP

No English description supplied.

No references supplied.