Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.0.7. This is due to a missing capability check in the 'save_custom_user_profile_fields' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to supply the 'ec_store_admin_access' parameter during a profile update and gain store manager access to the site.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-15 | 5 | Disclosure4Patch1 |
| 2026-02-17 | 1 | Disclosure1 |
| 2026-02-20 | 1 | Disclosure1 |
⚡ New CVE Alert: CVE-2026-1750 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1750 #CVE-2026-1750 #CVE #High #Wordpress #CyberSecurity #InfoSec https://t.co/AfwLjwbpH0
Post summary
The tweet announces CVE‑2026‑1750, a high‑severity WordPress vulnerability, but provides no exploit details, mitigation steps, or evidence of active exploitation.
[CVE-2026-1750: HIGH] Vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart for WordPress up to v7.0.7 allows attackers to gain store manager access via privilege escalation.#cve,CVE-2026-1750,#cybersecurity https://cvefind.com/CVE-2026-1750
Post summary
A new high‑severity privilege‑escalation vulnerability (CVE‑2026‑1750) was disclosed for Ecwid WordPress shopping cart up to v7.0.7, allowing attackers to gain store manager access.
CVE-2026-1750 Privilege Escalation in Ecwid WordPress Plugin Allows Unauthorized Store ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1750 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The tweet announces a new privilege‑escalation vulnerability (CVE-2026-1750) in the Ecwid WordPress plugin, providing only a brief description without any PoC, exploit, or patch details.
CVE-2026-1750 The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.0.7. This is due to a… https://www.cve.org/CVERecord?id=CVE-2026-1750
Post summary
The Ecwid plugin for WordPress is vulnerable to privilege escalation in all versions up to 7.0.7, as identified by CVE‑2026‑1750.
CVE-2026-1750 (CVSS:8.8, HIGH) is Awaiting Analysis. The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Escalation in all versio..https://nvd.nist.gov/vuln/detail/CVE-2026-1750 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2026-1750 is a high‑severity privilege escalation vulnerability in the Ecwid WordPress plugin, currently awaiting analysis with no PoC, exploit or patch disclosed.
🟠 CVE-2026-1750 - High The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.0.7. This is due to a missing capability chec... https://www.thehackerwire.com/vulnerability/CVE-2026-1750/ https://t.co/INkz4mcdAq
Post summary
The tweet announces a privilege‑escalation vulnerability (CVE‑2026‑1750) in the Ecwid WordPress plugin affecting versions up to 7.0.7, caused by a missing capability check.
🚨 HIGH severity: CVE-2026-1750 lets low-permission users escalate to admin in Ecwid by Lightspeed Shopping Cart for WordPress (all versions ≤7.0.7). Patch ASAP, restrict roles, monitor activity. Details: https://radar.offseq.com/threat/cve-2026-1750-cwe-269-improper-privilege-... https://t.co/VPYol64y3F
Post summary
The tweet announces a high‑severity CVE that lets low‑permission users gain admin rights in Ecwid for WordPress, urges immediate patching, and advises role restrictions.