Security Advisory

CVE-2026-14941

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-10 06:00:15

Last updated 2026-08-11 20:37:06

Assigner WPScan

CVSS score 5.4

State PUBLISHED

Description

The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on several settings-related AJAX actions, allowing users with minimal permissions such as Subscribers to invoke administrative settings handlers, update Customer Reviews for WooCommerce WordPress plugin before 5.116.0 options, and disclose store configuration.

← Browse all CVEs View on cve.org ↗