What is GHSA-hh27-gq4q-7xq8?

GHSA-hh27-gq4q-7xq8 is a security advisory published by GitHub Security Advisories with High severity. The Simpler Checkout WordPress plugin before 1.5.4 does not properly restrict who can create...

Which CVE IDs does GHSA-hh27-gq4q-7xq8 cover?

GHSA-hh27-gq4q-7xq8 covers the following CVE IDs: CVE-2026-121870. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hh27-gq4q-7xq8?

GHSA-hh27-gq4q-7xq8 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-hh27-gq4q-7xq8HighCVSS 7.5

The Simpler Checkout WordPress plugin before 1.5.4 does not properly restrict who can create...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-121870 →

📋 Description

The Simpler Checkout WordPress plugin before 1.5.4 does not properly restrict who can create orders and checks its automatic login link with a key that stays empty until the store owner configures the Simpler Checkout WordPress plugin before 1.5.4, allowing subscribers on stores that have not completed setup to log in as an administrator.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-121870
https://wpscan.com/vulnerability/a07c97a1-0faf-43fa-a4c7-0f09937790eb
https://github.com/advisories/GHSA-hh27-gq4q-7xq8