https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T20:17:05.363402+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-16568 CVE-2026-16568 — ShopApper <= 0.4.62 - Subscriber+ Customer Data Disclosure via IDOR 2026-10-09T20:17:08.671029+00:00

Affected: Unknown Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce

The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the customer profile being queried through one of its REST endpoints, allowing any authenticated user (e.g. a customer/subscriber) to retrieve other users' personal data, including their email address, name, and roles.