UNKNOWN NVD

CVE-2026-78474

The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines,

The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and to search the store's orders by customer name or email address.

References

https://wpscan.com/vulnerability/9518db93-0cd9-4db5-af9b-5371218c8b50/

Published: 2026-09-16 · Source: NVD · Feed updated: 2026-09-16

This unknown severity vulnerability was published on 2026-09-16 via NVD.

vulnfeed aggregates 14123 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.