Recherche « Unknown Product Delivery Date for WooCommerce »
1 CVE
Critique 0
Élevée 0
Moyenne 0
Faible 1
Non évaluée 0
Exploitées (KEV)
Tri : plus récentes
« Unknown Product Delivery Date for WooCommerce » ✕
-
CVE-2026-110191 2.7 Faible
Unknown Product Delivery Date for WooCommerce
The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information.