CVE-2026-14941

CVE-2026-14941 affects the Customer Reviews for WooCommerce WordPress plugin for versions before 5.116.0. The root cause is missing nonce and capability checks on several settings-related AJAX actions, allowing users with minimal permissions (e.g., Subscribers) to invoke administrative settings h...