CVE-2026-42664 WordPress AI Product Search for WooCommerce – Motive Commerce Search plugin <= 1.38.2 - Broken Access Control vulnerability

🗓️ 15 Jun 2026 20:18:44Reported by PatchstackType

Unauthenticated access in WordPress AI Product Search for WooCommerce Motive Commerce Search up to 1.38.2.

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2026-42664	15 Jun 202620:18	–	cve
EUVD	EUVD-2026-36829	15 Jun 202620:18	–	euvd
NVD	CVE-2026-42664	15 Jun 202621:16	–	nvd
Patchstack	WordPress AI Product Search for WooCommerce – Motive Commerce Search plugin <= 1.38.2 - Broken Access Control vulnerability	9 May 202605:36	–	patchstack
Positive Technologies	PT-2026-49455	15 Jun 202600:00	–	ptsecurity

[
  {
    "vendor": "Motive Commerce Search",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "motive-commerce-search",
    "product": "AI Product Search for WooCommerce &#8211; Motive Commerce Search",
    "versions": [
      {
        "lessThanOrEqual": "1.38.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom",
        "changes": [
          {
            "at": "1.38.3",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/wordpress/plugin/motive-commerce-search/vulnerability/wordpress-ai-product-search-for-woocommerce-motive-commerce-search-plugin-1-38-2-broken-access-control-vulnerability

15 Jun 2026 20:18Current

CVSS 3.18.2

CWE-862