CVE-2026-1750 | Ecwid by Lightspeed Ecommerce Shopping Cart Plugin save_custom_user_profile_fields privilege escalation

A vulnerability labeled as critical has been found in Ecwid by Lightspeed Ecommerce Shopping Cart Plugin up to 7.0.7 on WordPress. Affected by this vulnerability is the function save_custom_user_profile_fields. The manipulation of the argument ec_store_admin_access results in privilege escalation.

This vulnerability is cataloged as CVE-2026-1750. The attack may be launched remotely. There is no exploit available.