Beveiligingsadvies

CVE-2026-16568

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-27 06:00:17

Laatst bijgewerkt 2026-08-27 14:23:48

Toegewezen door WPScan

CVSS-score 4.3

Status PUBLISHED

Beschrijving

The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the customer profile being queried through one of its REST endpoints, allowing any authenticated user (e.g. a customer/subscriber) to retrieve other users' personal data, including their email address, name, and roles.

← Alle CVE's bekijken Bekijk op cve.org ↗