CVE-2026-14941

The Customer Reviews for WooCommerce WordPress plugin (versions before 5.116.0 ) is vulnerable to an authorization bypass due to missing nonce or capability checks on multiple settings-related AJAX actions . This allows users with minimal permissions, such as Subscribers , to invoke administrativ...