PT-2026-145000
CVE-2026-115733
·
Published
2026-11-11
·
Updated
2026-11-11
Description by
CVSS 3.1
9.1
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Printaura-Woocommerce versions prior to 4.0.3
Description
An authentication bypass exists in the Printaura-Woocommerce WordPress plugin due to improper access restrictions on the WooCommerce REST API. This flaw allows unauthenticated attackers to send requests to any WooCommerce REST route to read and modify sensitive store data, including customer orders, personal information, payment settings, and webhooks.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾