CVE-2026-119748 | AyeCode GetPaid Plugin up to 2.8.62 process_invoice maybe_use_invoice authorization

November 4, 2026 Yanac

A vulnerability described as critical has been identified in AyeCode GetPaid Plugin up to 2.8.62. This affects the function process_invoice. The manipulation of the argument maybe_use_invoice results in authorization bypass.

This vulnerability is reported as CVE-2026-119748. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More