9 matches found
CVE-2026-116528
The Chargely Free Subscriptions For Woocommernce WordPress plugin (versions up to and including 1.0 ) contains a vulnerability where a REST API route fails to perform authorization checks. This allows unauthenticated attackers to retrieve stored configuration details, specifically the live WooCom...
EUVD-2026-125857
The Chargely Free Subscriptions For Woocommernce WordPress plugin through 1.0 does not perform any authorization check on a REST API route that returns its stored configuration, allowing unauthenticated attackers to retrieve the live WooCommerce REST API consumer key and secret it holds, which...
WordPress Printaura-Woocommerce plugin <= 4.0.2 - Unauthenticated WooCommerce REST API Authentication Bypass vulnerability
Unauthenticated WooCommerce REST API Authentication Bypass vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Printaura-Woocommerce versions = 4.0.2...
CVE-2026-115733
The Printaura-Woocommerce WordPress plugin through 4.0.2 does not properly restrict access to the WooCommerce REST API, causing every WooCommerce REST route to accept unauthenticated requests, which allows unauthenticated attackers to read and modify store data including customer orders and...
CVE-2026-115733 PrintAura WooCommerce API <= 4.0.2 - Unauthenticated WooCommerce REST API Authentication Bypass
The Printaura-Woocommerce WordPress plugin through 4.0.2 does not properly restrict access to the WooCommerce REST API, causing every WooCommerce REST route to accept unauthenticated requests, which allows unauthenticated attackers to read and modify store data including customer orders and...
CVE-2026-115733
The Printaura-Woocommerce WordPress plugin (versions
EUVD-2026-123165
The Printaura-Woocommerce WordPress plugin through 4.0.2 does not properly restrict access to the WooCommerce REST API, causing every WooCommerce REST route to accept unauthenticated requests, which allows unauthenticated attackers to read and modify store data including customer orders and...
PT-2026-145000
The Printaura-Woocommerce WordPress plugin through 4.0.2 does not properly restrict access to the WooCommerce REST API, causing every WooCommerce REST route to accept unauthenticated requests, which allows unauthenticated attackers to read and modify store data including customer orders and...
CVE-2026-115733: Unknown Printaura-Woocommerce: The Printaura-Woocommerce WordPress plugin through 4.0.2 does not properly restrict access to the WooCommerce REST API,…
The Printaura-Woocommerce WordPress plugin through 4.0.2 does not properly restrict access to the WooCommerce REST API, causing every WooCommerce REST route to accept unauthenticated requests, which allows unauthenticated attackers to read and modify store data including customer orders and...