CVE-2026-14313

CVE-2026-14313 affects PeproDev WooCommerce Receipt Uploader for WordPress up to version 2.8.0 (slug: pepro-bacs-receipt-upload-for-woocommerce). The vulnerability is an unauthenticated missing-authorization flaw enabling IDOR write, enabling tampering with order receipts when WooCommerce is pres...