Unauthenticated Sensitive Data Exposure in WooCommerce Signature Add-On

CVE-2026-52694

What is CVE-2026-52694?

The WooCommerce Signature Add-On for WordPress has a vulnerability that allows unauthorized users to access sensitive information. This risk arises due to inadequate access controls, allowing unauthenticated requests to retrieve private data stored within the application. Websites utilizing versions 2.0 and earlier of this add-on could potentially expose critical user information, resulting in privacy breaches. It is essential for users to assess their current configurations and ensure they apply available updates to mitigate this security risk.

References