CVE-2026-24999

No fix known EPSS <1%CVSS 5.3

Missing Authorization vulnerability in Alma Alma alma-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Alma: from n/a through <= 5.16.1.

Published 2026-02-19 · CVE record · OSV

Products: Alma