POS Entegratör – Gurmehub Ödeme Eklentisi <= 3.7.103 - Missing Authorization

2026-06-29 00:00

hivesec

Strategic Overview

Status

Patched in 3.8.0

Affected PluginPOS Entegratör – Gurmehub Ödeme Eklentisi

Affected Version<= 3.7.103

CVSS5.3Medium

CVECVE-2026-57688

View all POS Entegratör – Gurmehub Ödeme Eklentisi vulnerabilities

Vulnerability Overview

The POS Entegratör – Gurmehub Ödeme Eklentisi plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 3.7.103. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Technical Analysis

REMEDIATION: Update to version 3.8.0, or a newer patched version --- IDENTIFIER: CWE-862 (Missing Authorization) The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

External References

https://www.cve.org/CVERecord?id=CVE-2026-57688 https://www.wordfence.com/threat-intel/vulnerabilities/id/5b7b3286-b36d-42c6-94e8-e8c24047c472

POS Entegratör – Gurmehub Ödeme Eklentisi <= 3.7.103 - Missing Authorization (CVE-2026-57688)