CVE-2026-119747 | AyeCode GetPaid Plugin up to 2.8.62 REST API class-getpaid-rest-posts-controller.php check_post_permissions improper authorization

A vulnerability labeled as critical has been found in AyeCode GetPaid Plugin up to 2.8.62. The affected element is the function check_post_permissions of the file includes/api/class-getpaid-rest-posts-controller.php of the component REST API. Executing a manipulation can lead to improper authorization.

This vulnerability is registered as CVE-2026-119747. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More