Threats tagged 'ghsa-9w8w-cqc3-2qh3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-123698The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes High2026-11-11GCVE DatabaseCVE-2026-123698 The Security For WooCommerce WordPress plugin up to version 1.0.16 has a vulnerability where one of its REST API routes is accessible without authentication. This flaw allows unauthenticated users to retrieve the plugin's full settings, including secret keys and the hidden login URL. Report on CVE-2026-123698 Vulnerability #ghsa-9w8w-cqc3-2qh3	GCVE Database	2026-11-11

Page 1 of 1