CVE-2026-11351
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Jul 29, 2026
Vendor
unknown
Description
The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published (e.g. draft, pending or private) WooCommerce products.