CVE-2026-27073

HIGH

WordPress Addi – Cuotas que se adaptan a ti plugin <= 2.0.4 - Broken Authentication vulnerability

Title source: cna

Description

Use of Hard-coded Credentials vulnerability in Addi Addi – Cuotas que se adaptan a ti buy-now-pay-later-addi allows Password Recovery Exploitation.This issue affects Addi – Cuotas que se adaptan a ti: from n/a through <= 2.0.4.

References (1)

[Vdb Entry] https://patchstack.com/database/Wordpress/Plugin/buy-now-pay-later-addi/vulnerability/wordpress-addi-cuotas-que-se-adaptan-a-ti-plugin-2-0-4-broken-authentication-vulnerability?_s_id=cve

Scores

CVSS v3 7.5

EPSS 0.0004

EPSS Percentile 12.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-798

Status published

Products (3)

Addi/Addi – Cuotas que se adaptan a ti < 2.0.4

Addi/Addi – Cuotas que se adaptan a ti < <= 2.0.4

Addi/Addi – Cuotas que se adaptan a ti < 2.0.4

Published Mar 25, 2026

Tracked Since Mar 25, 2026