Unrated severityNVD Advisory· Published Nov 11, 2026
CVE-2026-115733
CVE-2026-115733
Description
The Printaura-Woocommerce WordPress plugin through 4.0.2 does not properly restrict access to the WooCommerce REST API, causing every WooCommerce REST route to accept unauthenticated requests, which allows unauthenticated attackers to read and modify store data including customer orders and personal information, store and payment settings, and webhooks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=4.0.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.