CVE-2026-78137 | StoreGrowth Plugin up to 2.1.1 on WordPress BOGO offer feature authorization

August 27, 2026 Yanac

A vulnerability described as problematic has been identified in StoreGrowth Plugin up to 2.1.1 on WordPress. The affected element is an unknown function of the component BOGO offer feature. The manipulation results in missing authorization.

This vulnerability is reported as CVE-2026-78137. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More