Unknown Product Delivery Date For Woocommerce vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Product Delivery Date For Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

2.7CVE-2026-110191unknownproduct delivery date for woocommerce
EPSS score
0.23%
The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information.