CVE-2026-12736 | wpify Woo Plugin up to 5.4.16 on WordPress SettingsApi option SettingsApi::save_option option/data privileges management

July 24, 2026 Yanac

A vulnerability has been found in wpify Woo Plugin up to 5.4.16 on WordPress and classified as problematic. This vulnerability affects the function SettingsApi::save_option of the file /wp-json/wpify-woo/v1/option of the component SettingsApi. The manipulation of the argument option/data leads to improper privilege management.

This vulnerability is uniquely identified as CVE-2026-12736. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More