CVE-2026-115733: critical vulnerability in Printaura-Woocommerce
PrintAura WooCommerce API <= 4.0.2 - Unauthenticated WooCommerce REST API Authentication Bypass
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.1epss 0.2%
The Printaura-Woocommerce WordPress plugin through 4.0.2 does not properly restrict access to the WooCommerce REST API, causing every WooCommerce REST route to accept unauthenticated requests, which allows unauthenticated attackers to read and modify store data including customer orders and personal information, store and payment settings, and webhooks.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Unknown · Printaura-Woocommercepublic PoCs found — 1
cve_referencewpscan.com/vulnerability/dac80e74-ecfc-49e2-82a9-0c70285de1c1/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.