What is GHSA-rh79-4xm5-pwhf?

GHSA-rh79-4xm5-pwhf is a security advisory published by GitHub Security Advisories with Medium severity. The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress...

Which CVE IDs does GHSA-rh79-4xm5-pwhf cover?

GHSA-rh79-4xm5-pwhf covers the following CVE IDs: CVE-2026-16568. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rh79-4xm5-pwhf?

GHSA-rh79-4xm5-pwhf has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-rh79-4xm5-pwhfMediumCVSS 4.3

The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress...

Vendor

GitHub Security Advisories

Published

August 27, 2026

Last Modified

August 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-16568 →

📋 Description

The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the customer profile being queried through one of its REST endpoints, allowing any authenticated user (e.g. a customer/subscriber) to retrieve other users' personal data, including their email address, name, and roles.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-16568
https://wpscan.com/vulnerability/489be79d-df68-4384-83ab-c3fa5400eadc
https://github.com/advisories/GHSA-rh79-4xm5-pwhf