Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-21
Empik For Woocommerce - Security Vulnerability (CVE-2026-9766)
The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify arbitrary WooCommerce product metadata, including Empik logistic class (_empik_logistic_klass), product state (_empik_product_state, _empik_product_state_all_variants), and Empik export and offer flags on any product in the store.
PLUGIN
Empik For Woocommerce
CVE-2026-9766
Risk Score
Threat Entry
Updated 2026-06-17
Empik For Woocommerce - PHP Object Injection (CVE-2025-32568)
Deserialization of Untrusted Data vulnerability in empik EmpikPlace for Woocommerce empik-for-woocommerce allows Object Injection.This issue affects EmpikPlace for Woocommerce: from n/a through
PLUGIN
Empik For Woocommerce
CVE-2025-32568
Risk Score