Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account Takeover

Hippoo Mobile App for WooCommerce WordPress plugin = 1.9.4 contains an authentication bypass caused by logic conflation in user permission checks, letting unauthenticated attackers take over administrator accounts via REST API password reset. id: CVE-2026-10580 info: name: Hippoo Mobile App for...

Hippoo Mobile App for WooCommerce - Broken Access Control

Hippoo Mobile App for WooCommerce = 1.9.4 contains a broken access control vulnerability caused by incorrect privilege assignment, letting attackers escalate their privileges, exploit requires no special conditions. id: CVE-2026-49060 info: name: Hippoo Mobile App for WooCommerce - Broken Access...

Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to and including 1.7.1 via the templateredirect function. The plugin registers 'hippooserve' as a WordPress query variable and uses it to serve PWA files from the pwa/ directory. In...

Hippoo-Mobile-App-For-WooCommerce-CVE-Report

Hippoo-Mobile-App-for-WooCommerce-CVE-Report CVE-2025-13339 공개 CVE-2025-13339 - Hippoo Mobile App for WooCommerce 취약점 이 저장소는 hippooo가 개발한 WordPress 플러그인인 Hippoo Mobile App for WooCommerce = 1.6.1에서 발견된 취약점을 공개합니다. 🛠 영향받는 버전 제품 : Hippoo Mobile App for WooCommerce 버전 : v1.6.1 URL :...

By-Poloss..-..CVE-2026-10580

CVE-2026-10580: WooCommerce용 Hippoo 모바일 앱 = 1.9.4 - 인증되지 않은 인증 우회를 통한 관리자 계정 탈취 인증되지 않은 사용자 → 논리적 오류를 통한 관리자 계정 탈취 📌 요약 | ---|--- CVE| CVE-2026-10580 플러그인| Hippoo Mobile App for WooCommerce 버전| ≤ 1.9.4 CVSS| 9.8 심각 인증 필요| ❌ 아니오 관리자 탈취| ✅ 예 WooCommerce 데이터| ✅ 전체 액세스 🧠 원인 요약 getuserpermissions 함수는...

CVE-2026-10580

WordPress - Hippoo Mobile App for WooCommerce = 1.9.4 - 인증 우회를 통한 관리자 계정 탈취 개요 이 도구는 CVE-2026-10580 에 대한 개념 증명 익스플로잇입니다. 이 취약점은 Hippoo Mobile App for WooCommerce WordPress 플러그인버전 = 1.9.4에 영향을 미치는 인증 우회 취약점입니다. 이 취약점은 인증되지 않은 공격자가 관리자를 포함한 모든 사용자의 비밀번호를 재설정하여 사이트 전체를 장악할 수 있게 합니다. ⚠️ 중요: 이 도구는 공인된...

Exploit for CVE-2026-49060

CVE-2026-49060 - Hippoo Mobile App for WooCommerce Incorrect P...

CVE-2026-49065

Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce = 1.9.5 versions...

CVE-2026-49065 WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce = 1.9.5 versions...

CVE-2026-49065 WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce = 1.9.5 versions...

EUVD-2026-36872

Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce = 1.9.5 versions...

CVE-2026-49065

The CVE applies to WordPress Hippoo Mobile App for WooCommerce plugin versions

CVE-2026-49065: Missing Authorization

Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce = 1.9.5 versions...

PT-2026-49502

Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce = 1.9.5 versions...

EUVD-2026-36358

Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.9.4...

CVE-2026-49060

Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.9.4...

CVE-2026-49060

The CVE-2026-49060 entry concerns the WordPress plugin Hippoo Mobile App for WooCommerce. Affected: Hippoo Mobile App for WooCommerce plugin versions up to 1.9.4. Issue: Incorrect Privilege Assignment leading to Privilege Escalation. Impact: high risk across confidentiality, integrity, and availa...

CVE-2026-49060 WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.9.4...

CVE-2026-49060 WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.9.4...

CVE-2026-49060: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.9.4...