CVE-2026-6512 — Vulnerability intelligence

Infused Addons — InfusedWoo Pro

Published: 2026-05-14T08:24:28.204Z

CVSS

9.1

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

The InfusedWoo Pro plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete arbitrary posts, pages, products, or orders, mass-delete all comments on any post, and change any post's status.

Sources

• CVE-2026-6512
• Original advisory
• Original advisory
• CVE-2026-6512