CVE-2026-18357

The CVE-2026-18357 affects the WPC Order Tip for WooCommerce WordPress plugin prior to version 3.3.1. The vulnerability arises because a reporting feature does not perform authorization or nonce checks, allowing unauthenticated access to sensitive customer order data such as billing names, order ...