CVE-2026-14941
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 10, 2026
Vendor
unknown
Description
The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on several settings-related AJAX actions, allowing users with minimal permissions such as Subscribers to invoke administrative settings handlers, update Customer Reviews for WooCommerce WordPress plugin before 5.116.0 options, and disclose store configuration.