CVE-2026-107863mediumCWE-862

CVE-2026-107863: medium-severity vulnerability in Codection Products Restricted Users for…

WordPress Products Restricted Users for WooCommerce plugin <= 0.7 - Broken Access Control vulnerability

Published 12 Oct 2026

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3

exploitation probability

—

observed exploitation

nono source reports it

Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Products Restricted Users for WooCommerce: from n/a through 0.7.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Codection · Products Restricted Users for WooCommerce

References

https://patchstack.com/database/wordpress/plugin/woo-products-restricted-users/vulnerability/wordpress-products-restricted-users-for-woocommerce-plugin-0-7-broken-access-control-vulnerability?_s_id=cve