CVE-2026-52694

HighCVSS 7.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

15th percentile - higher than 15% of all known CVEs

The Signature Add-On for WooCommerce versions <= 2.0 has a vulnerability that allows unauthorized access to sensitive data.

Organizations may be exposed to the disclosure of confidential information, potentially leading to privacy breaches and loss of customer trust.

It is recommended to update the Signature Add-On to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce <= 2.0 versions.