CVE-2026-110191
Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX Actions
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information.
| Vendor | unknown |
| Product | product delivery date for woocommerce |
| Published | Oct 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown product delivery date for woocommerce
Be the first to know when new unknown vulnerabilities affecting unknown product delivery date for woocommerce are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Product Delivery Date for WooCommerce
0 < 3.3.2
References
Credits
Farid Narimanov WPScan