CVE-2025-49352

Publication date

2025-12-31 16:25:44

Family

Patchstack

State

PUBLISHED

Description

Authorization Bypass Through User-Controlled Key vulnerability in YoOhw Studio Order Cancellation & Returns for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Cancellation & Returns for WooCommerce: from n/a through 1.1.10.