Wava.co vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Wava.co products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-39609 Medium · 5.3 CWE-862 Apr 8, 2026

WordPress Wava Payment plugin <= 0.3.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Wava.co Wava Payment wava-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wava Payment: from n/a through <= 0.3.7.