{"vulnerability": "CVE-2026-103685", "sightings": [{"uuid": "df23a532-d839-46fe-8913-b3fb8b695b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103685", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418647784767812", "content": "CVE-2026-103685 WordPress ALD \u2013 Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.4 - Broken Access Control vulnerability Missing Authorization vulnerability in VillaTheme ALD \u2013 Dropshipping and Fulfillment for AliExpress and WooCommerce woo-alidropship allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ALD \u2013 Dropshipping and Fulfillment for AliExpress and WooCommerce: from n/a through 2.2.4.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103685https://patchstack.com/database/wordpress/plugin/woo-alidropship/vulnerability/wordpress-ald-dropshipping-and-fulfillment-for-aliexpress-and-woocommerce-plugin-2-2-4-broken-access-control-vulnerability?_s_id=cve#VillaTheme #ALD\u2013DropshippingandFulfillmentforAliExpressandWooCommerce#CVE_2026_103685#bot", "creation_timestamp": "2026-10-10T21:06:19.340818Z"}]}