Threats tagged 'ghsa-rh79-4xm5-pwhf'

CVE-2026-16568 is a medium severity vulnerability in the Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through version 0.4.62. The vulnerability allows any authenticated user to access other users' personal data via a REST endpoint due to lack of proper ownership verification. This includes sensitive information such as email addresses, names, and user roles.