CVE-2026-18945

The WP Helper Premium WordPress plugin (versions before 4.7.6 ) fails to verify the order key when rendering its custom order confirmation page or handling related AJAX actions. This vulnerability allows unauthenticated users to view other customers' order details, including personal information ...