CVE-2026-19073

The Order Sync with Zendesk for WooCommerce WordPress plugin, in versions before 2.2.3 , contains a vulnerability where one of its REST API endpoints fails to perform sufficient capability checks. Specifically, the plugin does not verify if a requester owns the account being queried, allowing una...