CVE-2026-40737

INFO Priority: 0.00 BB Relevance: 0/100

Published: 2026-04-15 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

Authorization Bypass Through User-Controlled Key vulnerability in VillaTheme COMPE compe-woo-compare-products allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects COMPE: from n/a through <= 1.1.4.

Weakness Classification (1)

CWE-639

References & Advisories (1)

https://patchstack.com/database/Wordpress/Plugin/compe-woo-compare-products/vulnerability/wordpress-compe-plugin-1-1-4-insecure-direct-object-references-idor-vulnerability?_s_id=cve

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.21%

Raw Score 0.002120

Percentile 11.5%

Date 2026-10-29

EPSS Trend

2026-10-29

0.00212

2026-10-28

0.00212

Intelligence Sources

nvd ref →

External Links

NVD (NIST) CVE Details FIRST EPSS API OSV.dev