CVE-2026-86785

The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticated users to update Social Commerce for WooCommerce WordPress plugin through 2.5.4 configuration and product synchronisation state...

EUVD-2026-85019

The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticated users to update Social Commerce for WooCommerce WordPress plugin through 2.5.4 configuration and product synchronisation state...

CVE-2026-86785 Social Commerce for WooCommerce <= 2.5.4 - Unauthenticated Plugin Option and Product Sync Status Update

The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticated users to update Social Commerce for WooCommerce WordPress plugin through 2.5.4 configuration and product synchronisation state...

CVE-2026-86785

The Social Commerce for WooCommerce WordPress plugin, version 2.5.4 and below , is vulnerable to an unauthenticated privilege escalation. The root cause is a lack of authorization checks on specific REST API endpoints , which allows attackers to modify the plugin's configuration and product synch...

CVE-2026-86785 Social Commerce for WooCommerce <= 2.5.4 - Unauthenticated Plugin Option and Product Sync Status Update

The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticated users to update Social Commerce for WooCommerce WordPress plugin through 2.5.4 configuration and product synchronisation state...

WordPress Social Commerce for WooCommerce plugin <= 2.5.4 - Unauthenticated Plugin Option and Product Sync Status Update vulnerability

Unauthenticated Plugin Option and Product Sync Status Update vulnerability discovered by Pablo González, Fran Ramirez and Iñigo Sánchez in WordPress Plugin Social Commerce for WooCommerce versions = 2.5.4...

PT-2026-97182

Name of the Vulnerable Software and Affected Versions Social Commerce for WooCommerce WordPress plugin versions prior to 2.5.5 Description Lack of authorization checks on certain REST API endpoints allows unauthenticated users to modify the plugin configuration and the product synchronization...

CVE-2026-86785: Missing Authorization

The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticated users to update Social Commerce for WooCommerce WordPress plugin through 2.5.4 configuration and product synchronisation state...