CVE-2026-91009
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 17, 2026
Vendor
unknown
Description
The Active Woot Products Tables for WooCommerce. 100% FREE WordPress plugin before 2.1.3 does not have authorisation and CSRF checks in some of its AJAX actions, allowing any authenticated users, such as subscriber, to change the title of arbitrary posts, pages and products.