Unrated severityNVD Advisory· Published Oct 21, 2026
CVE-2026-111596
CVE-2026-111596
Description
The Kliken: Ads + Pixel for Meta WordPress plugin before 1.2.3 does not verify that a visitor holds an order's key before outputting that order's details on the order confirmation page, allowing unauthenticated users to retrieve the billing location, purchased products and totals of other customers' orders by enumerating order IDs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <1.2.3
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.