CVE-2026-14332 - Ecwid by Lightspeed Ecommerce Shopping Cart 7.0.9 - Subscriber+ Store Disconnection via 'ec_disconnect' Action
Brief
CVE ID : CVE-2026-14332
Published : Aug. 13, 2026, 8:13 a. m.
- 52 minutes ago
Description : The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.
- 9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disconnect the store and take the storefront offline until an administrator reconnects it.
Severity: 0.0
- NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...