CVE-2026-106025 | WooCommerce Cargo Shipping Location Plugin up to 5.x on WordPress REST API Endpoint access control

November 10, 2026 Yanac

A vulnerability, which was classified as problematic, was found in WooCommerce Cargo Shipping Location Plugin up to 5.x on WordPress. This impacts an unknown function of the component REST API Endpoint. The manipulation results in improper access controls.

This vulnerability is identified as CVE-2026-106025. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More