CVE-2025-14886

5.3MEDIUM

The Japanized for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `order` REST API endpoint in all versions up to, and incl

게시됨: 1/9/2026업데이트됨: 1/13/2026
NVD에서 보기MITRE에서 보기

설명

The Japanized for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `order` REST API endpoint in all versions up to, and including, 2.7.17. This makes it possible for unauthenticated attackers to mark any WooCommerce order as processed/completed.

AI 분석AI 기반

참조