Beveiligingsadvies

CVE-2026-3589

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-06 09:11:10

Laatst bijgewerkt 2026-03-06 17:44:58

Toegewezen door WPScan

CVSS-score 7.5

Status PUBLISHED

Beschrijving

The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in admin call non store/WC REST endpoints, and create arbitrary admin users via a CSRF attack for example.

← Alle CVE's bekijken Bekijk op cve.org ↗