What is the CVSS score of CVE-2026-6372?

CVE-2026-6372 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.0%.

Accept Cryptocurrencies With Plisio CVE-2026-6372

EUVD-2026-22983 HIGH

Missing Authorization (CWE-862)

2026-04-15 Patchstack

WordPress Authentication Bypass Accept Cryptocurrencies With Plisio Wordpress Plugin

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 15:25 vuln.today

EUVD ID Assigned

Apr 15, 2026 - 16:45 euvd

EUVD-2026-22983

CVE Published

Apr 15, 2026 - 16:16 nvd

HIGH 7.5

DescriptionCVE.org

Missing Authorization vulnerability in Plisio Accept Cryptocurrencies with Plisio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accept Cryptocurrencies with Plisio: from n/a through 2.0.5.

AnalysisAI

Payment bypass in the Accept Cryptocurrencies with Plisio WordPress plugin through version 2.0.5 allows unauthenticated attackers to manipulate order payment statuses due to missing authorization checks. This high‑integrity vulnerability can be exploited to mark orders as paid without a legitimate transaction, enabling financial fraud. No active exploitation or public proofs of concept have been observed, and EPSS indicates a very low likelihood of in‑the‑wild attacks.