CVE-2026-19073

The Order Sync with Zendesk for WooCommerce WordPress plugin in versions before 2.2.3 fails to perform capability checks on one of its REST API endpoints and does not verify if a requester owns the account being queried. This vulnerability allows unauthenticated attackers to retrieve the order hi...