CVE-2026-56828

The Shopper headless e-commerce admin panel (versions 2.8.0 through 2.8.1 ) contains authorization gaps in three Livewire admin components. A staff member with only view_users and access_dashboard permissions can exploit these gaps to perform high-privilege actions. Specifically, in Permissions.p...