Veille CVE

Recherche « Unknown ShopSmart Loyalty for WooCommerce »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown ShopSmart Loyalty for WooCommerce » ✕
  1. CVE-2026-14832 5.3 Moyenne

    Unknown ShopSmart Loyalty for WooCommerce

    The ShopSmart Loyalty for WooCommerce WordPress plugin through 1.0.0 does not perform any authorization or ownership check on a phone-number lookup exposed to unauthenticated users, allowing anyone who knows a customer's phone number to retrieve that customer's loyalty profile, including name, email, and account balance.