CVE-2026-14941

The Customer Reviews for WooCommerce WordPress plugin is vulnerable in versions prior to 5.116.0 because it fails to perform nonce or capability checks on several settings-related AJAX actions. This flaw allows users with minimal permissions, such as Subscribers , to bypass authorization to invok...