CVE-2026-14858
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 12, 2026
Vendor
unknown
Description
The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowing any authenticated users such as Subscribers to read the personal data of any WooCommerce order and enumerate every order in the store.