EUVD-2026-75960
GHSA-qgf7-8crm-3896
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Network-accessible unauthenticated endpoints expose order data with no auth gate; confidentiality limited to customer order records, no integrity or availability impact.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
4DescriptionCVE.org
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers' order and attachment data.
AnalysisAI
Unauthenticated information disclosure in the Teddy Bear Customize Addon WordPress plugin through version 1.0.5 exposes WooCommerce order metadata and customer-uploaded file attachment URLs to any network attacker without credentials. The plugin's data-return endpoints implement no authorization or ownership checks whatsoever, enabling an attacker to enumerate and retrieve private order records and attachment links belonging to arbitrary customers. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions are required beyond the plugin being installed and active on a WordPress/WooCommerce site running version 1.0.5 or earlier. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 5.3 base score (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) accurately characterizes this as a low-complexity, network-accessible, unauthenticated information leak with limited confidentiality scope, but the real-world privacy impact may exceed what C:L implies: WooCommerce order metadata can include full customer names, shipping addresses, order contents, and payment references, while uploaded attachments may contain identity documents, artwork proofs, or other sensitive personal files. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No confirmed patched version is identified in the available data; the primary remediation is to deactivate and remove the Teddy Bear Customize Addon plugin (all versions through 1.0.5) from all WordPress/WooCommerce installations immediately. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Teddy Bear Customize Addon
View allUnauthenticated remote code execution in the Teddy Bear Customize Addon WordPress plugin (all versions through 1.0.5) al
Authentication bypass in the Teddy Bear Customize Addon WordPress plugin (through version 1.0.5) lets unauthenticated at
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today