{"affected":[{"defaultStatus":"unknown","product":"Security For WooCommerce","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.0.16","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-123705","cwes":["CWE-200"],"description":"The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes, allowing unauthenticated users to retrieve a detailed report of the server, PHP and WordPress configuration, including installed Security For WooCommerce WordPress plugin through 1.0.16 and  versions and the site administrator's email address.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/cb9bbd7a-c13a-4129-a910-45746af203ce/"}],"kev":null,"metrics":[],"modifiedAt":1794376815801,"publishedAt":1794376815801,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/cb9bbd7a-c13a-4129-a910-45746af203ce/"}],"remediation":[],"revision":"e24b5c5ee4a8afad461c0973ac31ded118d7cc0626f3d62304e12013824efa3c","sources":[{"modifiedAt":1794376815801,"name":"CNA: WPScan","retrievedAt":1794377438632,"url":"https://www.cve.org/CVERecord?id=CVE-2026-123705"}],"ssvc":null,"status":"published","title":"Security For WooCommerce <= 1.0.16 - Unauthenticated Server Configuration Information Disclosure","updatedAt":1794377438632}