PT-2025-54389
CVE-2025-49352
·
Published
2025-12-31
·
Updated
2026-09-23
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
YoOhw Studio Order Cancellation & Returns for WooCommerce versions through 1.1.10
Description
An authorization bypass exists due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. The issue impacts the Order Cancellation & Returns for WooCommerce plugin.
Recommendations
Update YoOhw Studio Order Cancellation & Returns for WooCommerce to a version later than 1.1.10.
Found an issue in the description? Have something to add? Feel free to write us 👾