CVE-2026-123701
MEDIUM
MEDIUM
Priority: 0.02
BB Relevance:
71/100
Published: 2026-11-11
Modified: 2026-11-12
First seen: 2026-11-11
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
None
I:
Low
A:
None
Description
The Security For WooCommerce WordPress plugin through 1.0.16 does not have proper authorization checks when resetting its settings, allowing unauthenticated users to reset any section of its configuration to the defaults and so disable security features such as a custom login URL, two-factor authentication, reCAPTCHA, password policies and the firewall.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| Unknown | Security For WooCommerce | 0 |
| Unknown | Security For WooCommerce | 0 |