CVE-2026-40741 — WordPress Redsys for WooCommerce Light plugin <= 7.0.0 - Broken Access Control vulnerability

CVE-2026-40741

WordPress Redsys for WooCommerce Light plugin <= 7.0.0 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Unauthenticated Broken Access Control in Redsys for WooCommerce Light <= 7.0.0 versions.

Vendor / product	Versions
Jose Conti / Redsys for WooCommerce Light	affected n/a through 7.0.0

CWE-862

CISA-ADP

No English description supplied.

No references supplied.