Unrated severityNVD Advisory· Published Sep 11, 2026

CVE-2026-14562

Description

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers' order and attachment data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Teddy Bear Customize Addonllm-fuzzy
Range: <=1.0.5
Package: https://wordpress.org/plugins/teddy-bear-customize-addon

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/890f55f9-0bd0-4816-a666-a735b41ce5c7/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000