bjorntech CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM bjorntech CVE published 2026-10-21

CVE-2026-111835

A Missing Authorization vulnerability in the BjornTech Swish for WooCommerce plugin for WordPress, affecting versions up to and including 3.7.8, allows attackers to exploit incorrectly configured access control security levels. This issue has a CVSS score of 6.5 and is classified as MEDIUM severity. Defenders should assess exposure and prioritize remediation. The vulnerability requires verification of plu [truncated]