CVE-2026-96817

Summary

The flaw allows unauthorized access to subscriber data in MakeCommerce for WooCommerce versions 4.1.0 and earlier, due to broken access control.

Exploitability

Exploitation requires access to the affected WooCommerce site and knowledge of the subscriber feature, making it moderately difficult.

Blast radius

If exploited, attackers could gain access to sensitive subscriber data, potentially leading to data breaches or other malicious activities.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to MakeCommerce for WooCommerce version 4.1.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.