CVE-2026-40737Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Authorization Bypass Through User-Controlled Key vulnerability in VillaTheme COMPE compe-woo-compare-products allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects COMPE: from n/a through <= 1.1.4.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Plugin/compe-woo-compare-products/vulnerability/wordpress-compe-plugin-1-1-4-insecure-direct-object-references-idor-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 1 mentions (2026-04-15); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-15	1	Disclosure1
2026-04-16	1	General1

Full discourse2 posts

CVE@CVEnew175d
General
CVE-2026-40737 Authorization Bypass Through User-Controlled Key vulnerability in VillaTheme COMPE compe-woo-compare-products allows Exploiting Incorrectly Configured Access Control … https://www.cve.org/CVERecord?id=CVE-2026-40737
Post summary
The post references CVE-2026-40737, noting it is an authorization bypass via user‑controlled key in VillaTheme COMPE compe-woo-compare-products, but provides no PoC, exploit, patch, or active exploitation details.
00000134
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds176d
Disclosure
CVE-2026-40737 Authorization Bypass Through User-Controlled Key in VillaTheme COMPE Versions 1.1.4 and Earlier https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40737
Post summary
The brief announcement lists CVE‑2026-40737 as an Authorization Bypass in VillaTheme COMPE, providing only a title and a link to a vulnerability page without any PoC, exploit, patch, or active exploitation details.
0000046
4.0K followersView on X

Explore more

Back to dashboard