CVE-2026-13329

The Buckaroo Woocommerce Payments Plugin (also referred to as WC Buckaroo BPE Gateway ) for WordPress, in versions before 4.9.0 , is vulnerable to an improper access control flaw. The plugin fails to perform required capability checks or nonce validation on an AJAX action used for processing paym...