CRITICALCVSS v3.1 9.1Vulnerability
CVE-2026-115733
The Printaura-Woocommerce WordPress plugin through 4.0.2 does not properly restrict access to the WooCommerce REST API, causing every WooCommerce REST route to accept unauthenticated requests, which allows unauthenticated attackers to read and modify store data including customer orders and personal information, store and payment settings, and webhooks.
Properties
- Severity
- CRITICAL
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Epss score
- 0.00202
- Cvss severity
- CRITICAL
- Cvss score
- 9.1
- Retrieved at
- 2026-11-11T23:51:12+00:00
- Last source
- FIRST EPSS
- Score
- 9.1
- Cvss version
- 3.1
- Cve id
- CVE-2026-115733
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- First seen by Signal
- 2026-11-11T07:36:44+00:00
- Name
- CVE-2026-115733
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Published at
- 2026-11-11T06:17:13.607
- Last modified
- 2026-11-11T12:18:53.697
- Epss percentile
- 0.10309
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph