{"id":"CVE-2026-97259","published":"2026-09-30T15:22:38.463","lastModified":"2026-09-30T16:19:26.343","description":"Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.\n\nThis issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.4.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-639"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/woo-vipps/vulnerability/wordpress-pay-with-vipps-for-woocommerce-plugin-6-2-4-insecure-direct-object-references-idor-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}