CVE-2025-15033

A vulnerability in the WooCommerce WordPress plugin (versions 8.1 through 10.4.2 ) allows logged-in customers to access order data belonging to guest customers on sites with specific configurations. This sensitive data exposure flaw can be exploited by authenticated users to view unauthorized inf...