CVE-2026-123698 | BDVDB-2026-404818 Detail
Security For WooCommerce
Description#
The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes, allowing unauthenticated users to retrieve its full settings, including configured secret keys and the hidden login URL.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-862 Missing Authorization
References#
Exploit#
History#
- Version 1Record published in the CVE List.