https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 20:50:49 +0000 https://vulnerability.circl.lu/vuln/cve-2026-16568 <p><strong>Affected:</strong> Unknown Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce</p> <p>The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the customer profile being queried through one of its REST endpoints, allowing any authenticated user (e.g. a customer/subscriber) to retrieve other users&#39; personal data, including their email address, name, and roles.</p> <p><strong>Affected:</strong> Unknown Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce</p> <p>The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the customer profile being queried through one of its REST endpoints, allowing any authenticated user (e.g. a customer/subscriber) to retrieve other users&#39; personal data, including their email address, name, and roles.</p> https://vulnerability.circl.lu/vuln/cve-2026-16568