CVE-2025-64358
CVE-2025-64358 concerns WebToffee Smart Coupons for WooCommerce (plugin: wt-smart-coupons-for-woocommerce) versions up to 2.2.3. The issue is Missing Authorization/Broken Access Control due to incorrectly configured access levels, enabling unauthorized access with network attack vector, no privil...