https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T23:38:51.493667+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123698 CVE-2026-123698 — Security For WooCommerce <= 1.0.16 - Unauthenticated Plugin Settings Disclosure via REST API 2026-11-11T23:38:51.495065+00:00

Affected: Unknown Security For WooCommerce

The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes, allowing unauthenticated users to retrieve its full settings, including configured secret keys and the hidden login URL.