CVE-2026-19073

The affected software is the Order Sync with Zendesk for WooCommerce WordPress plugin (pre-2.2.3). The root cause is that one REST API endpoint does not perform any capability checks and does not verify the requester’s ownership of the target account. This enables unauthenticated attackers to ret...