7.5
High
CVE-2026-39448 Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions
Description
Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| NOWPayments for WooCommerce 1.4 | earliest → 1.4.0 | No fix stated |