Threats Tagged 'cve-2026-4664'
View all threats tagged with 'cve-2026-4664'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-4664'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-4664 is an authentication bypass vulnerability in the Customer Reviews for WooCommerce WordPress plugin up to version 5.103.0. The flaw arises because the plugin's permission check compares a user-supplied key to an order meta value without verifying that the stored key is non-empty. When the stored key is empty (for orders without a review reminder email sent), an attacker can supply an empty key to bypass authentication. This allows unauthenticated attackers to submit, modify, and inject product reviews via the REST API endpoint, with reviews auto-approved by default. Join the discussion | CVE Database V5 | 04/10/2026, 01:24:57 UTC Added: 04/10/2026, 01:50:49 UTC |
Showing 1 to 1 of 1 result