CyberSecBulletin

Botiga Pro vulnerabilities

We track 1 vulnerability in Botiga Pro products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 19, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Botiga Pro vulnerabilities

  • 9.8 Critical severity

    Botiga Pro: Missing Authorization

    CVE-2026-86591Botiga Pro

    The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of its REST routes, allowing unauthenticated users to update arbitrary WordPress options with arbitrary values, which could lead to privilege escalation and a full si