CVE-2026-123699 | BDVDB-2026-404819 Detail

Security For WooCommerce

Description#

The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before running bulk Security For WooCommerce WordPress plugin through 1.0.16, and WordPress core updates, allowing unauthenticated users to force every pending update to be installed on the site.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-862 Missing Authorization

References#

https://wpscan.com/vulnerability/344ca520-dc28-4d52-a400-559d23359d23/

Exploit#

https://wpscan.com/vulnerability/344ca520-dc28-4d52-a400-559d23359d23/

History#

Version 12026-11-11Record published in the CVE List.