CVE-2025-66071

CVE-2025-66071 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Custom Order Numbers for WooCommerce (versions up to and including 1.11.0). The issue allows exploitation due to incorrectly configured access control, with a CVSS v3.1 base score of 5.3 (Mediu...