TI-2025-13936 CVE-2025-15260 · GHSA-vpqp-58m9-c69gMissing authorization in lwsdevelopers MyRewardsPriority LOW 29The MyRewards – Loyalty Points and Rewards for WooCommerce plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 5.6.1.CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00304 · Published 2026-02-04 · No fix listed CWE-862