CVE-2026-11351

MediumCVSS 5.3/10Last modified Jul 30, 2026

Description

The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published (e.g. draft, pending or private) WooCommerce products.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Jul 29, 2026
Last modified
Jul 30, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-1135119.1Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can relocate a Realm subtree CVE-2026-1135127.8After Effects is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of theCVE-2026-1135145.5After Effects is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leveraCVE-2026-1135167.8After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135177.8After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135195.5After Effects is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leveraCVE-2026-113527.5An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurCVE-2026-1135215.5After Effects is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker couCVE-2026-1135237.8After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135257.8After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135268.6After Effects is affected by a Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the contCVE-2026-1135287.8After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curren
CVE-2026-11351: Medium severity, CVSS 5.3 | Vulnix