WPC Order Tip for WooCommerce vulnerabilities
We track 1 vulnerability in WPC Order Tip for WooCommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 9, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest WPC Order Tip for WooCommerce vulnerabilities
- 7.5 High severity
WPC Order Tip for WooCommerce: Exposure of Sensitive Information to an Unauthorized Actor
The WPC Order Tip for WooCommerce WordPress plugin before 3.3.1 does not perform authorisation or nonce checks in one of its reporting features, allowing unauthenticated attackers to retrieve sensitive order data belonging to any customer of the store, such as