← Database

CVE-2026-90985

N/A CVSS: N/A Published: 2026-09-23 Modified: 2026-09-23

Description

The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product content through its comparison handler, allowing unauthenticated users to read the description of password-protected products.

Affected Platforms

Unknown

Weakness Type

Unknown

References