What is GHSA-gg4x-5759-6rq2?

GHSA-gg4x-5759-6rq2 is a security advisory published by GitHub Security Advisories with Medium severity. The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its...

Which CVE IDs does GHSA-gg4x-5759-6rq2 cover?

GHSA-gg4x-5759-6rq2 covers the following CVE IDs: CVE-2026-88828. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gg4x-5759-6rq2?

GHSA-gg4x-5759-6rq2 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-gg4x-5759-6rq2MediumCVSS 5.4

The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its...

Vendor

GitHub Security Advisories

Published

September 28, 2026

Last Modified

September 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-88828 →

📋 Description

The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing the holder of an account the site owner has blocked to keep authenticating with that account's privileges, without the block being enforced or recorded.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-88828
https://wpscan.com/vulnerability/52804421-8988-4d8a-9143-04683d05873d
https://github.com/advisories/GHSA-gg4x-5759-6rq2