CVE-2025-15484 in Order Notification for WooCommerce Plugin
摘要 (英语)
The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requests, enabling complete read/write access to store resources like products, coupons, and customers.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
负责
WPScan
预定
2026-01-07
披露
2026-04-01
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354610 | Order Notification for WooCommerce Plugin 弱身份验证 | 287 | 未定义 | 官方修复 | CVE-2025-15484 |