What is GHSA-6cxp-7f85-p38r?

GHSA-6cxp-7f85-p38r is a security advisory published by GitHub Security Advisories with Medium severity. The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress...

Which CVE IDs does GHSA-6cxp-7f85-p38r cover?

GHSA-6cxp-7f85-p38r covers the following CVE IDs: CVE-2026-16569. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6cxp-7f85-p38r?

GHSA-6cxp-7f85-p38r has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-6cxp-7f85-p38rMediumCVSS 4.3

The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress...

Vendor

GitHub Security Advisories

Published

August 27, 2026

Last Modified

August 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-16569 →

📋 Description

The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not check the user's capabilities before allowing a stock-update operation through one of its REST endpoints, allowing any authenticated user, such as a customer or subscriber, to change the stock quantity of arbitrary products.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-16569
https://wpscan.com/vulnerability/0d96cc80-0bba-45e4-8e07-220dc8b82c7d
https://github.com/advisories/GHSA-6cxp-7f85-p38r