https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:27:33.921564+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-14562 CVE-2026-14562 — Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Order Data Disclosure 2026-10-07T17:27:33.941020+00:00

Affected: Unknown teddy-bear-customize-addon

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers' order and attachment data.