9.1
Critical
CVE-2025-15484 The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant…
Description
The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requests, enabling complete read/write access to store resources like products, coupons, and customers.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Order Notification for WooCommerce 3.6 | earliest → < 3.6.3 | 3.6.3 |