Vulnerabilities CVE-2026-14941

CVE-2026-14941

None

Open

TLP:CLEAR

Customer Reviews for WooCommerce < 5.116.0 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on several settings-related AJAX actions, allowing users with minimal permissions such as Subscribers to invoke administrative settings handlers, update Customer Reviews for WooCommerce WordPress plugin before 5.116.0 options, and disclose store configuration.

Details

EPSS Score ⓘ: 0.17%

6.4th percentile
Confidence: 90%
Published: Aug 10, 2026
Last Modified: Aug 11, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.