CVE-2026-65501

Shiptastic for WooCommerce versions up to 5.1.0 are vulnerable to unauthenticated Insecure Direct Object References (IDOR), allowing attackers to access or manipulate resources without proper authorization. This could lead to unauthorized data exposure or modification, potentially compromising user information. E-commerce businesses using affected versions should prioritize patching to mitigate risks associated with this vulnerability.