CVE-2026-14332

The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin has a security flaw that allows any authenticated user, including subscribers, to take the store offline by disconnecting it, without proper authorization checks. This can be done by exploiting a vulnerability in one of the plugin's store-management actions, which does not verify the user's permissions or validate a security token. As a result, the storefront will become inaccessible until an administrator reconnects it.

Based on public CVE data (MITRE/NVD).