Is CVE-2026-106609 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106609?

CVE-2026-106609 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-106609

Description

Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2.