Vulnerability in Piweb Cancel Order / Refund Request For Woocommerce

CVE-2026-18603

The PiWeb Cancel order / Refund request for WooCommerce WordPress plugin before 1.3.4.34 does not have authorization or ownership checks when adding the contents of a previous order to the cart, allowing unauthenticated users to disclose t…

Affected products

  • Unknown Piweb Cancel Order / Refund Request For Woocommerce — versions 0

References