PT-2026-145000

CVE-2026-115733

·

Published

2026-11-11

·

Updated

2026-11-11

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Printaura-Woocommerce versions prior to 4.0.3
Description An authentication bypass exists in the Printaura-Woocommerce WordPress plugin due to improper access restrictions on the WooCommerce REST API. This flaw allows unauthenticated attackers to send requests to any WooCommerce REST route to read and modify sensitive store data, including customer orders, personal information, payment settings, and webhooks.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾