{"id":"CVE-2026-123705","published":"2026-11-11T06:17:19.830","lastModified":"2026-11-11T06:17:19.830","description":"The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes, allowing unauthenticated users to retrieve a detailed report of the server, PHP and WordPress configuration, including installed Security For WooCommerce WordPress plugin through 1.0.16 and  versions and the site administrator's email address.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/cb9bbd7a-c13a-4129-a910-45746af203ce/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}