Feed/CVE-2026-90985
CVE-2026-90985MEDIUMCVSS 5.3

CVE-2026-90985

Published Sep 23, 2026·Updated Sep 23, 2026

NVD Description

The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product content through its comparison handler, allowing unauthenticated users to read the description of password-protected products.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free