CVE-2025-12075 | Fahad Mahmood Order Splitter for WooCommerce Plugin up to 5.3.5 on WordPress AJAX Endpoint wos_troubleshooting authorization

February 17, 2026 Yanac

A vulnerability was found in Fahad Mahmood Order Splitter for WooCommerce Plugin up to 5.3.5 on WordPress. It has been classified as problematic. This affects the function wos_troubleshooting of the component AJAX Endpoint. The manipulation leads to missing authorization.

This vulnerability is uniquely identified as CVE-2025-12075. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More