5.3
Moyenne
CVE-2026-15261 The TI WooCommerce Wishlist WordPress plugin before 2.13.0 does not enforce the same owner-only access control on its…
Description
The TI WooCommerce Wishlist WordPress plugin before 2.13.0 does not enforce the same owner-only access control on its REST API that it applies on the front-end, allowing unauthenticated users to read the metadata and item contents of private wishlists.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| TI WooCommerce Wishlist 2.13 | premières → < 2.13.0 | 2.13.0 |