What is CVE-2026-1710?

CVE-2026-1710 is a medium-severity vulnerability in Woocommerce Woopayments: Integrated Payments, classified under Improper Authorization. CVSS score: 6.5/10. Published 2026-03-31.

How severe is CVE-2026-1710?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in Woocommerce Woopayments: Integrated Payments

CVE-2026-1710

The WooPayments: Integrated WooCommerce Payments plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_upe_appearance_ajax' function in all versions up to, and including, 10…

EPSS: 0.001 (24.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L.

Affected products

Woocommerce Woopayments: Integrated Payments — versions 0

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

www.wordfence.com/threat-intel/vulnerabilities/id/cec13225-baa3-4f26-b2d2-af610…
plugins.trac.wordpress.org/browser/woocommerce-payments/tags/10.4.0/includes/cl…
plugins.trac.wordpress.org/changeset/3480315/woocommerce-payments/trunk/include…
research.cleantalk.org/cve-2026-1710/

Frequently asked questions

What is CVE-2026-1710?: CVE-2026-1710 is a medium-severity vulnerability in Woocommerce Woopayments: Integrated Payments, classified under Improper Authorization. CVSS score: 6.5/10. Published 2026-03-31.
How severe is CVE-2026-1710?: Medium severity. CVSS v3 base score is 6.5 out of 10.