PT-2026-93287 · WordPress · Woocommerce Sales Mis Report
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Ni WooCommerce Sales Report versions prior to 4.2.0
Description
One of the report-printing routines lacks authentication and authorization checks. This allows unauthenticated users to retrieve WooCommerce order details and customer contact information, target specific individual orders, and search store orders using customer names or email addresses.
Recommendations
Update Ni WooCommerce Sales Report to version 4.2.0 or later.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Woocommerce Sales Mis Report