What is CVE-2026-6802?

CVE-2026-6802 is a medium-severity vulnerability in Fahadmahmood Easy Upload Files During Checkout, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 5.3/10. Published 2026-07-10.

How severe is CVE-2026-6802?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Auth bypass in Fahadmahmood Easy Upload Files During Checkout

CVE-2026-6802

The Easy Upload Files During Checkout plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.0.1. This is due to missing authorization checks in the ufdc_custom_init() function, which processes th…

Vulnerability class: IDOR (Insecure Direct Object Reference)

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Fahadmahmood Easy Upload Files During Checkout — versions 0

Weakness classification (CWE)

CWE-639 — Authorization Bypass Through User-Controlled Key

References

Frequently asked questions

What is CVE-2026-6802?: CVE-2026-6802 is a medium-severity vulnerability in Fahadmahmood Easy Upload Files During Checkout, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 5.3/10. Published 2026-07-10.
How severe is CVE-2026-6802?: Medium severity. CVSS v3 base score is 5.3 out of 10.