← WordPress Vulnerabilities
WordPress security by component

custom-price-for-woocommerce

custom-price-for-woocommerce is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 29, 2026; the highest published CVSS base score is 5.3.

Plugin slug: custom-price-for-woocommerce

CVE-2026-115601: Custom Price for WooCommerce: Missing authorization

Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Price for WooCommerce: from n/a through 1.1.29. The CNA vector indicates that no prior authentication is required. The export does not disclose the endpoint, input parameter, vulnerable function or detailed input-processing path. No additional exploit mechanics are inferred. The precise affected operation and resulting application-level impact are not described beyond the vulnerability class. The structured affected range is <= 1.1.29.

PublishedOct 29, 2026
Known safe version1.1.30
Published vulnerabilities for custom-price-for-woocommerce
Safe version
Oct 29, 2026 CVE-2026-115601
Custom Price for WooCommerce: Missing authorization
Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Price for WooCommerce: from n/a through 1.1.29. The CNA vector indicates that no prior authentication is required. The export does not disclose the endpoint, input parameter, vulnerable function or detailed input-processing path. No additional exploit mechanics are inferred. The precise affected operation and resulting application-level impact are not described beyond the vulnerability class. The structured affected range is <= 1.1.29.
1.1.30
CVE5.3