Missing Authorization Vulnerability in Custom Order Numbers for WooCommerce by Tyche Softwares

CVE-2025-66071

What is CVE-2025-66071?

The Custom Order Numbers for WooCommerce plugin developed by Tyche Softwares exhibits a missing authorization vulnerability which allows unauthorized access to functionalities due to incorrect access control configurations. This flaw affects versions of the plugin prior to 1.11.0, enabling attackers to exploit the weakness and manipulate orders or data improperly. Users are strongly advised to update their plugins to the latest version to safeguard their WooCommerce installations.

References