CVE-2026-19709

The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against the one supplied in a request, allowing unauthenticated attackers to reach its REST routes and disclose any user's membership plan details on sites where the API has been enabled but no keys were ever generated.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://wpscan.com/vulnerability/957888a4-bb11-42c6-930a-8c836170452b/

Configurations

No configuration.

History

22 Oct 2026, 16:09

Type	Values Removed	Values Added
Summary		(es) El plugin de WordPress Membership For WooCommerce anterior a la versión 3.1.2 no verifica que se haya generado realmente una clave secreta de consumidor de API antes de compararla con la proporcionada en una solicitud, lo que permite a atacantes no autenticados acceder a sus rutas REST y divulgar los detalles del plan de membresía de cualquier usuario en sitios donde la API ha sido habilitada pero nunca se generaron claves.

Information

Published : 2026-08-19 06:17

Updated : 2026-10-22 16:09

NVD link : CVE-2026-19709

Mitre link : CVE-2026-19709

CVE.ORG link : CVE-2026-19709

JSON object : View

Products Affected

No product.

CWE

CWE-287

Improper Authentication

{"id": "CVE-2026-19709", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-19709", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-19T15:58:20.914251Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "contact@wpscan.com", "affectedData": [{"vendor": "Unknown", "product": "Membership For WooCommerce", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.2", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-19T06:17:40.273", "references": [{"url": "https://wpscan.com/vulnerability/957888a4-bb11-42c6-930a-8c836170452b/", "source": "contact@wpscan.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against the one supplied in a request, allowing unauthenticated attackers to reach its REST routes and disclose any user's membership plan details on sites where the API has been enabled but no keys were ever generated."}, {"lang": "es", "value": "El plugin de WordPress Membership For WooCommerce anterior a la versi\u00f3n 3.1.2 no verifica que se haya generado realmente una clave secreta de consumidor de API antes de compararla con la proporcionada en una solicitud, lo que permite a atacantes no autenticados acceder a sus rutas REST y divulgar los detalles del plan de membres\u00eda de cualquier usuario en sitios donde la API ha sido habilitada pero nunca se generaron claves."}], "lastModified": "2026-10-22T16:09:59.560", "sourceIdentifier": "contact@wpscan.com"}