Sensitive Information Exposure in Extend B2B - Companies and Users Management for WooCommerce Plugin

CVE-2026-96769

What is CVE-2026-96769?

The Extend B2B - Companies and Users Management for WooCommerce plugin has a vulnerability that exposes sensitive company information through the register_company_api. All versions up to and including 2.1.4 are affected, enabling unauthenticated attackers to access critical data such as WordPress user IDs for owners and members, billing email addresses, credit balances, full credit histories associated with admin user IDs, individual purchase limits, and shared cart records with purchase-order numbers. This vulnerability compromises the overall security of company data within WooCommerce.

References