SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-73399

MEDIUM · CVSS 6.5 EPSS 0.40%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Flutterwave WooCommerce versions up to 3.3.0 are vulnerable to unauthenticated broken authentication, allowing attackers to potentially gain unauthorized access to user accounts or sensitive data. This vulnerability could lead to account takeover and data breaches, making it critical for e-commerce businesses using affected versions to prioritize immediate updates. Organizations relying on this plugin should assess their exposure and apply necessary patches to mitigate risks.

CVE
CVE-2026-73399
Severity
MEDIUM
CVSS
6.5
EPSS
0.40%

Original NVD Description

Unauthenticated Broken Authentication in Flutterwave WooCommerce <= 3.3.0 versions.