CVE-2026-110191 — Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View A…

CVE-2026-110191

Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX Actions PUBLISHED

Description (CNA)

The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information.

Affected (CNA)

Vendor / product	Versions
Unknown / Product Delivery Date for WooCommerce	affected 0 before 3.3.2

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/d7310c1a-f858-4dc5-8102-813fb64096a6/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.