VULNERABILITY INTELLIGENCE

CVE-2026-14829

CVSS score8.2 HIGH

EPSS probability0.33%

CISA KEVNot currently listed

Published2026-08-06

Last modified2026-08-26

Description

The Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through 1.0.13 does not properly restrict access to its license-management functionality, relying on a shared secret computed entirely from publicly available information, allowing unauthenticated attackers to deactivate the Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through 1.0.13's premium licensing state and erase the stored license key.