CVE-2026-54810

HIGH NVD

CVSS Score 7.5

Severity HIGH

Published Jun 17, 2026

Vendor unknown

Description

Missing Authorization vulnerability in Nexi Payments Nexi XPay allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Nexi XPay: from n/a through 8.3.1.

References

https://patchstack.com/database/wordpress/plugin/cartasi-x-pay/vulnerability/wordpress-nexi-xpay-plugin-8-3-1-broken-access-control-vulnerability?_s_id=cve