CVE-2026-39765

WebAppick Challan

Published 6 Oct 2026 · updated 6 Oct 2026 · Deferred

7.2 High · CVSS 3.1, patchstack.com

Description

Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.

References

patchstack.com/database/wordpress/plugin/webappick-pdf-invoice-for-woocommerce/vulnerability/wordpress-challan-plugin-3-7-88-privilege-escalation-vulnerability?_s_id=cve