Advanced Partial Payment Or Deposit For Woocommerce Vulnerabilities

The Advanced Partial Payment or Deposit for WooCommerce plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.0.1. This is due to a missing capability check on a function. This makes it possible for authenticated attackers, with customer-level access and above, to perform an...

CVSS:

4.3

(Wordfence)

Affected:

up to 4.0.1

Fixed in:

4.0.12

Disclosed:

Oct 4, 2026

CVE-2026-95589 on NVD →

The Advanced Partial Payment or Deposit for WooCommerce plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.1.0. This is due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

(Wordfence)

Affected:

up to 3.1.0

Fixed in:

4.0.1

Disclosed:

Sep 10, 2026

CVE-2026-27378 on NVD →