{"affected":[{"defaultStatus":"unknown","product":"Security For WooCommerce","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.0.16","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-123703","cwes":["CWE-862"],"description":"The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before ending a user's login sessions, allowing unauthenticated visitors to log out any user, including administrators, and to keep them logged out by repeating the request.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/6b255385-26ae-416c-8c2d-a673508aa212/"}],"kev":null,"metrics":[],"modifiedAt":1794376815455,"publishedAt":1794376815455,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/6b255385-26ae-416c-8c2d-a673508aa212/"}],"remediation":[],"revision":"582efcfcdf1a273ee0fec870cf5b3393e2ffbdc5219381d8bb955ebc3572a0fc","sources":[{"modifiedAt":1794376815455,"name":"CNA: WPScan","retrievedAt":1794377436363,"url":"https://www.cve.org/CVERecord?id=CVE-2026-123703"}],"ssvc":null,"status":"published","title":"Security For WooCommerce <= 1.0.16 - Unauthenticated Arbitrary User Logout via usfw_user_force_logout","updatedAt":1794377436363}