Threats tagged 'ghsa-7gh8-3f2m-mxgq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-123695The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to several of its REST API High2026-11-11GCVE DatabaseCVE-2026-123695 The Security For WooCommerce WordPress plugin up to version 1.0.16 has a vulnerability where several REST API routes are not properly restricted. This flaw allows unauthenticated users to generate login tokens for any user and retrieve them, enabling unauthorized login as any user, including administrators. Report on CVE-2026-123695 Vulnerability #ghsa-7gh8-3f2m-mxgq	GCVE Database	2026-11-11

Page 1 of 1