medium5.3
CVE-2026-86785
The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticat…
Impact
The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticated users to update Social Commerce for WooCommerce WordPress plugin through 2.5.4 configuration and product synchronisation state.
Affected products
| Product | Affected versions |
|---|---|
| Social Commerce For WooCommerce WordPress Plugin | through 2.5.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.