6.5 Medium

CVE-2026-27046 Missing Authorization vulnerability in Kaira StoreCustomizer woocustomizer allows Exploiting Incorrectly Configured…

Description

Missing Authorization vulnerability in Kaira StoreCustomizer woocustomizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects StoreCustomizer: from n/a through <= 2.6.3.

Affected products and versions

Product	Affected versions	Fixed in
StoreCustomizer 2.6	earliest → 2.6.3	No fix stated

Do you use StoreCustomizer?

Track this CVE Watch StoreCustomizer Check my SBOMs

www.cveye.io/en/cve/CVE-2026-27046

Timeline

Published March 25, 2026
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE