CVE-2026-16569

The ShopApper Mobile App Builder Service WordPress plugin (through version 0.4.62 ) fails to verify user capabilities before processing a stock-update request via one of its REST endpoints. This allows any authenticated user, including low-privilege roles such as customer or subscriber , to modif...

EUVD-2026-66872

The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not check the user's capabilities before allowing a stock-update operation through one of its REST endpoints, allowing any authenticated user, such as a customer or subscriber...

WordPress Mobile App for WooCommerce plugin <= 0.4.66 - Subscriber+ Arbitrary Product Stock Update vulnerability

Subscriber+ Arbitrary Product Stock Update vulnerability discovered by TruongLV1 From FPT Night Wolf in WordPress Plugin Mobile App for WooCommerce versions = 0.4.66...

in amirsanni/mini-inventory-and-sales-management-system

💥 BUG unprivileged user can update stoke 💥 STEP TO REPDOUCE 1. From admin account goto https://1410inc.xyz/mini-inventory-and-sales-management-system/administrators and add new user callled user-B with basic role .\ 2. Now goto user-B account and here user-B cant see any item.\ Now user-B execute...