What is the CVSS score of CVE-2026-66692?

CVE-2026-66692 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.2%.

Colissimo WooCommerce Plugin CVE-2026-66692

EUVD-2026-53900 MEDIUM

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-08-06 Patchstack

GHSA-6x54-f333-chpm

WordPress Authentication Bypass Wordpress Plugin Colissimo Officiel Colissimo

4.3

CVSS 3.1 · Vendor: Patchstack

Severity by source

Vendor (Patchstack) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

4.3 MEDIUM

Authenticated customer exploits IDOR over network with no complexity; impact is limited shipping data read-only, no integrity or availability effect.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (Patchstack).

CVSS VectorVendor: Patchstack

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 06, 2026 - 16:04 vuln.today

CVE Published

Aug 06, 2026 - 14:28 cve.org

MEDIUM 4.3

DescriptionCVE.org

Customer Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions.

AnalysisAI

Insecure Direct Object Reference (IDOR) in the Colissimo Officiel WooCommerce shipping plugin (≤2.10.0) enables authenticated low-privileged customers to access shipping or order objects belonging to other users by manipulating controllable object references in plugin requests. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) confirms network-exploitable, low-complexity exploitation limited to authenticated WooCommerce customer accounts, with impact confined to limited confidentiality exposure of delivery data. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.

Technical ContextAI

CWE-639 (Authorization Through User-Controlled Key) describes the root cause: the plugin uses a user-supplied value - likely an order ID, shipment reference, or customer identifier - to retrieve backend objects without verifying that the requesting user is authorized to access the specific object referenced. This is the canonical IDOR pattern in WooCommerce plugins, where REST API endpoints or AJAX handlers pass object keys directly from user input to database queries. The CPE string (cpe:2.3:a:colissimo:colissimo_officiel_:_méthodes_de_livraison_pour_woocommerce:*:*:*:*:*:*:*:*) identifies the affected software as the official Colissimo plugin for WooCommerce on WordPress. Colissimo is the parcel delivery service operated by La Poste (France), and this plugin integrates its shipping label and delivery method APIs into WooCommerce storefronts. The vulnerability surface is the plugin's customer-facing order or shipment data retrieval logic.

RemediationAI

Update the Colissimo Officiel plugin to a version beyond 2.10.0 once a patched release is published by the vendor; no specific fixed version number is confirmed from the available data, so monitor the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/colissimo-shipping-methods-for-woocommerce/vulnerability/wordpress-colissimo-officiel-methodes-de-livraison-pour-woocommerce-plugin-2-10-0-insecure-direct-object-references-idor-vulnerability and the WordPress plugin repository for an updated release. As an interim compensating control, restrict WooCommerce customer self-registration to reduce the pool of accounts that could be used to exploit this flaw - note this may impact legitimate customer onboarding and should be weighed against business needs. Deploying a WAF rule to detect sequential or anomalous order/shipment ID enumeration in plugin-specific AJAX or REST endpoints can surface active abuse attempts without blocking legitimate traffic. Temporarily deactivating the plugin on stores where shipping label generation can be managed through the Colissimo merchant portal directly is a higher-impact workaround that eliminates the attack surface entirely but disrupts integrated shipping workflows.