Know what’s on your machine,
and what’s in it.

CVEInsight.

Scan Browse Privacy Terms Disclaimer

© 2026 · Data from NVD

CVE-2026-39448High

Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions

Published Jul 2, 2026

What happened

Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions.

How an attack would work

Reachable from: Network
Attack difficulty: Low
Access needed first: None
Needs you to click: None

Read more

https://patchstack.com/database/wordpress/plugin/nowpayments-for…

7.5/ 10

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Official sources

National Vulnerability Database
CVE.org record

Not sure if this one affects you?

Check my computer

CVE-2026-39448 — High severity | CVEInsight