https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 09:08:49 +0000 https://db.gcve.eu/vuln/cve-2026-103379 <p><strong>Affected:</strong> Unknown WATI Chat and Notification</p> <p>The WATI Chat and Notification WordPress plugin through 1.1.8 does not require a valid, non-empty secret on a public endpoint that returns its stored API token, which an unauthenticated attacker can then present to a second public endpoint to obtain the order-received URL of any WooCommerce order and read the customer&#39;s name, address, phone number and email address. The endpoints are reachable in the WATI Chat and Notification WordPress plugin through 1.1.8&#39;s default state and are closed only once a WATI account is connected.</p> <p><strong>Affected:</strong> Unknown WATI Chat and Notification</p> <p>The WATI Chat and Notification WordPress plugin through 1.1.8 does not require a valid, non-empty secret on a public endpoint that returns its stored API token, which an unauthenticated attacker can then present to a second public endpoint to obtain the order-received URL of any WooCommerce order and read the customer&#39;s name, address, phone number and email address. The endpoints are reachable in the WATI Chat and Notification WordPress plugin through 1.1.8&#39;s default state and are closed only once a WATI account is connected.</p> https://db.gcve.eu/vuln/cve-2026-103379