CVE-2026-59536 — WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerability

CVE-2026-59536

WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions.

Vendor / product	Versions
CoCart Headless / CoCart – Headless ecommerce	affected n/a through 4.8.4

CWE-862

CISA-ADP

No English description supplied.

No references supplied.