CVE-2026-12736

Basic Information

Severity HIGH
Base Score 8.0
CNA Wordfence
Published Date 2026-07-23 22:32:00 UTC
Last Modified 2026-07-23 22:32:00 UTC
CVE.org Link https://www.cve.org/CVERecord?id=CVE-2026-12736
NVD https://nvd.nist.gov/vuln/detail/CVE-2026-12736

Description

The Wpify Woo plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 5.4.16. This is due to the SettingsApi::save_option() REST route (POST /wp-json/wpify-woo/v1/option) passing the request-supplied 'option' and 'data' parameters directly to update_option() without any option-name allowlist or value sanitization, while the permission_callback only verifies the manage_woocommerce capability. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to elevate their privileges to Administrator by overwriting arbitrary WordPress options (for example setting default_role to administrator and users_can_register to 1, or disabling security plugins via active_plugins).

Affected Products

Vendor Product
wpify crn/vat
wpify heureka and more for woocommerce
wpify wpify woo – withdrawal
wpify qr payments

References

Back to Lookup View on CVE.org