Unrated severityNVD Advisory· Published Nov 11, 2026
CVE-2026-123705
CVE-2026-123705
Description
The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes, allowing unauthenticated users to retrieve a detailed report of the server, PHP and WordPress configuration, including installed Security For WooCommerce WordPress plugin through 1.0.16 and versions and the site administrator's email address.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=1.0.16+ 1 more
- (no CPE)range: <=1.0.16
- (no CPE)range: <=1.0.16
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.