MyRewards – Loyalty Points and Rewards for WooCommerce – Reward orders, referrals, product reviews and more, CVE-2026-40786

CVE, Research URL: CVE-2026-40786
Home page URL: Security reports for MyRewards – Loyalty Points and Rewards for WooCommerce – Reward orders, referrals, product reviews and more
Application: MyRewards – Loyalty Points and Rewards for WooCommerce – Reward orders, referrals, product reviews and more
Published on: Apr 15, 2026
Research Description: Missing Authorization vulnerability in Long Watch Studio MyRewards woorewards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyRewards: from n/a through <= 5.7.3.
Affected versions: max 5.7.3.
Status: vulnerable

MyRewards &#8211; Loyalty Points and Rewards for WooCommerce &#8211; Reward orders, referrals, product reviews and more, CVE-2026-40786