CVE-2026-110191
CVE-2026-110191 · Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX Actions
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information.
CVSS 2.7 · Baja · EPSS 0,2% · Corrección disponible
- Publicación
- Actualización
Productos y versiones afectados
product delivery date for woocommerce
- Versiones
- ≥ 0, < 3.3.2: Afectada (semver)
Actualiza a 3.3.2