Veille CVE

Recherche « Unknown teddy-bear-customize-addon »

3 CVE

Critique 2 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown teddy-bear-customize-addon » ✕
  1. CVE-2026-14562 5.3 Moyenne

    Unknown teddy-bear-customize-addon

    The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers' order and attachment data.

  2. CVE-2026-14560 10.0 Critique

    Unknown teddy-bear-customize-addon

    The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execute code on the server.

  3. CVE-2026-14559 9.8 Critique

    Unknown teddy-bear-customize-addon

    The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers to log in as any registered user, including administrators, by supplying only that user's email address.