critical9.1
CVE-2025-15484
The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requ…
Impact
The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requests, enabling complete read/write access to store resources like products, coupons, and customers.
Affected products
| Product | Affected versions |
|---|---|
| Order Notification For WooCommerce WordPress Plugin | before 3.6.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.