TI-2025-11088 CVE-2025-12091 · GHSA-m3rp-5j27-g55m
Missing authorization in instantsearchplus Search, Filters & Merchandising for WooCommerce
Priority LOW 20
The Search, Filters & Merchandising for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcis_save_email' endpoint in all versions up to, and i…