UNKNOWN NVD

CVE-2026-14858

The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowing any authenticated users such as Subsc

The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowing any authenticated users such as Subscribers to read the personal data of any WooCommerce order and enumerate every order in the store.

References

https://wpscan.com/vulnerability/59022a2a-29b2-485a-9512-cd0a27b6492b/

Published: 2026-08-12 · Source: NVD · Feed updated: 2026-08-12

This unknown severity vulnerability was published on 2026-08-12 via NVD.

vulnfeed aggregates 9910 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.