CVE-2026-15411

The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the spsg_popup_products option with arbitrary attacker-controlled data. The 'ajd_protected' nonce used as the sole gate is exposed to unauthenticated visitors on every frontend page through the BoGo module's wp_localize_script call, rendering it ineffective as an authorization barrier.

• CWE-862

• https://plugins.trac.wordpress.org/browser/storegrowth-sales-booster/tags/2.1.0/modules/bogo/includes/EnqueueScript.php#L170
• https://plugins.trac.wordpress.org/browser/storegrowth-sales-booster/tags/2.1.0/modules/sales-pop/includes/Ajax.php#L34
• https://plugins.trac.wordpress.org/browser/storegrowth-sales-booster/tags/2.1.0/modules/sales-pop/includes/Ajax.php#L49
• https://plugins.trac.wordpress.org/browser/storegrowth-sales-booster/tags/2.1.0/modules/sales-pop/includes/Ajax.php#L52
• https://plugins.trac.wordpress.org/changeset?reponame=&old=3619581%40storegrowth-sales-booster&new=3619581%40storegrowth-sales-booster
• https://www.wordfence.com/threat-intel/vulnerabilities/id/a1e07c9c-7d35-41b4-aaa1-f37c4f10f7ac?source=cve

Published

Jul 28, 2026

Last Modified

Jul 28, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-15403The Pinpoint Booking System – Version 2 plugin for WordPress…4.9
• CVE-2026-15404The Lpagery plugin for WordPress is vulnerable to Stored Cro…6.4
• CVE-2026-15407The Themify Builder plugin for WordPress is vulnerable to au…4.3
• CVE-2026-15409A Server-side request forgery (SSRF) vulnerability has been …10
• CVE-2026-1541The Avada (Fusion) Builder plugin for WordPress is vulnerabl…4.3
• CVE-2026-15410Post-authentication improper control of generation of code (…7.2
• CVE-2026-15414The Subscriptions for WooCommerce plugin for WordPress is vu…8.8
• CVE-2026-15415AWS HealthOmics is a HIPAA-eligible service that fully manag…6.8
• CVE-2026-15416A flaw was identified in Argo CD, the GitOps engine used by …8.9
• CVE-2026-1542The Super Stage WP WordPress plugin through 1.0.1 unserializ…6.5
• CVE-2026-15420The Nexter Blocks – Gutenberg Blocks, Page Builder & AI Webs…4.3
• CVE-2026-15422The illumos SCTP inbound path performs association lookup fo…9.1