CVE-2026-94275: Track Orders for WooCommerce 0 to before 1.2.7

Affected technology

Track Orders for WooCommerce · 0 to before 1.2.7
Vendor not specified by the source

Description’s affected range: before 1.2.7 does not verify ownership of an order before returning its billing details

Component: Not specified by the source

What an attacker can do

Unauthenticated attackers can obtain a customer's name, email address, phone number, postal address and order history by supplying that customer's email address.