The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requests, enabling complete read/write access to store resources like products, coupons, and customers.
CVE-2025-15484
NONE
EPSS 0.04%
Updated Apr 01, 2026
WordPress
CVE Details
CVE ID
CVE-2025-15484
Published Date
Apr 01, 2026
Vendor
WordPress
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.04%
Likelihood of exploitation in next 30 days
Percentile:
11.7th percentile (higher than 11.7% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory