{"uuid": "19bdbbe8-114e-48c3-bb99-3515cfa8b18d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106609", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417735109189837", "content": "CVE-2026-106609 WordPress Bayarcash WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerability Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2.\nhttps://www.cve.org/CVERecord?id=CVE-2026-106609https://patchstack.com/database/wordpress/plugin/bayarcash-wc/vulnerability/wordpress-bayarcash-woocommerce-plugin-4-4-2-broken-access-control-vulnerability?_s_id=cve#WebImpian #BayarcashWooCommerce#CVE_2026_106609#bot", "creation_timestamp": "2026-10-10T17:14:12.813738Z"}