CVSS
5.4
CVSS v3.1
EPSS
N/A
Exploit Prediction Score
Published
August 13, 2026
Exploitability
No EPSS data available
The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disconnect the store and take the storefront offline until an administrator reconnects it.
No CWE data available.
No package data available.
Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).