Security Advisory

CVE-2026-14858

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-12 06:00:13

Last updated 2026-08-12 19:36:25

Assigner WPScan

CVSS score 4.3

State PUBLISHED

Description

The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowing any authenticated users such as Subscribers to read the personal data of any WooCommerce order and enumerate every order in the store.

← Browse all CVEs View on cve.org ↗