Beveiligingsadvies

CVE-2026-14941

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-10 06:00:15

Laatst bijgewerkt 2026-08-11 20:37:06

Toegewezen door WPScan

CVSS-score 5.4

Status PUBLISHED

Beschrijving

The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on several settings-related AJAX actions, allowing users with minimal permissions such as Subscribers to invoke administrative settings handlers, update Customer Reviews for WooCommerce WordPress plugin before 5.116.0 options, and disclose store configuration.

← Alle CVE's bekijken Bekijk op cve.org ↗