CVE-2026-96817

Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.

• Published Sep 30, 2026
• CVSS 8.2 high
• 0.4% chance of exploitation in the next 30 days (EPSS)

CVE-2026-96817 at the National Vulnerability Database