CVE-2026-106609: Web Impian Bayarcash Woocommerce

High severity, CVSS 7.5.

Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2.

Affected products

• Web Impian Bayarcash Woocommerce: up to and including 4.4.2

Published 2026-10-10. Last modified 2026-10-10.