CVE-2026-78474

Name of the Vulnerable Software and Affected Versions Ni WooCommerce Sales Report versions prior to 4.2.0

Description One of the report-printing routines lacks authentication and authorization checks. This allows unauthenticated users to retrieve WooCommerce order details and customer contact information, target specific individual orders, and search store orders using customer names or email addresses.

Recommendations Update Ni WooCommerce Sales Report to version 4.2.0 or later.