CVE-2026-127207

Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated low-privileged users, including Subscribers, to access the scsupportget and scsupportsave AJAX actions due to the absence of capability and nonce checks in SCCSPSupportController...

EUVD-2026-124710

Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated low-privileged users, including Subscribers, to access the scsupportget and scsupportsave AJAX actions due to the absence of capability and nonce checks in SCCSPSupportController...

CVE-2026-127207

The Sendcloud for WooCommerce plugin (versions through 1.0.41 ) is vulnerable to a missing authorization flaw in the SCCSP_Support_Controller component. Due to the absence of capability and nonce checks, authenticated low-privileged users, such as Subscribers , can access the sc_support_get and s...

CVE-2026-127207: Sendcloud: Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated…

Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated low-privileged users, including Subscribers, to access the scsupportget and scsupportsave AJAX actions due to the absence of capability and nonce checks in SCCSPSupportController...