PT-2026-115288

APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId. Attackers can request GET /node/nodeId/description, which skips space membership and node permission check...

WordPress WPC Smart Compare for WooCommerce plugin < 6.6.1 - Unauthenticated Password-Protected Product Description Disclosure vulnerability

Unauthenticated Password-Protected Product Description Disclosure vulnerability discovered by Artus KG in WordPress Plugin WPC Smart Compare for WooCommerce versions 6.6.1...

CVE-2026-90985

The WPC Smart Compare for WooCommerce WordPress plugin, in versions before 6.6.1 , contains a vulnerability where it fails to enforce standard WordPress post-password protection. Specifically, the comparison handler (associated with woosc_load) does not validate passwords when returning product c...