CVE-2026-9766 | Empik for Woocommerce Plugin up to 1.5.1 on WordPress authorization

September 19, 2026 Yanac

A vulnerability has been found in Empik for Woocommerce Plugin up to 1.5.1 on WordPress and classified as problematic. Impacted is an unknown function. Performing a manipulation of the argument _empik_logistic_klass/_empik_product_state/_empik_product_state_all_variants results in authorization bypass.

This vulnerability is reported as CVE-2026-9766. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More