Beveiligingsadvies

CVE-2026-14858

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-12 06:00:13

Laatst bijgewerkt 2026-08-12 19:36:25

Toegewezen door WPScan

CVSS-score 4.3

Status PUBLISHED

Beschrijving

The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowing any authenticated users such as Subscribers to read the personal data of any WooCommerce order and enumerate every order in the store.

← Alle CVE's bekijken Bekijk op cve.org ↗