CVE-2026-3594

The Riaxe Product Customizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4 via the '/wp-json/InkXEProductDesignerLite/orders' REST API endpoint. The endpoint is registered with 'permission_callback' set to '__return_true', meaning no authentication or authorization checks are performed. The endpoint queries WooCommerce order data from the database and returns it to the requester, including customer first and last names, customer IDs, order IDs, order totals, order dates, currencies, and order statuses. This makes it possible for unauthenticated attackers to extract sensitive customer and order information from the WooCommerce store.

• CWE-200

• https://plugins.trac.wordpress.org/browser/riaxe-product-customizer/tags/2.4/riaxe-product-designer.php#L1101
• https://plugins.trac.wordpress.org/browser/riaxe-product-customizer/tags/2.4/riaxe-product-designer.php#L2809
• https://plugins.trac.wordpress.org/browser/riaxe-product-customizer/tags/2.4/riaxe-product-designer.php#L2820
• https://plugins.trac.wordpress.org/browser/riaxe-product-customizer/tags/2.4/riaxe-product-designer.php#L986
• https://plugins.trac.wordpress.org/browser/riaxe-product-customizer/trunk/riaxe-product-designer.php#L1101
• https://plugins.trac.wordpress.org/browser/riaxe-product-customizer/trunk/riaxe-product-designer.php#L2809
• https://plugins.trac.wordpress.org/browser/riaxe-product-customizer/trunk/riaxe-product-designer.php#L2820
• https://plugins.trac.wordpress.org/browser/riaxe-product-customizer/trunk/riaxe-product-designer.php#L986
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2ffd6393-6604-48d9-ba22-7d989305e9ed?source=cve

Published

Apr 8, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-35904Incorrect access control in the web management interface of …9.8
• CVE-2026-35905T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, an…9.8
• CVE-2026-35906An undocumented debug CGI endpoint in T3 Technology CPE mode…9.6
• CVE-2026-3591A use-after-return vulnerability exists in the `named` serve…5.4
• CVE-2026-3592BIND resolvers are vulnerable to an amplified resource consu…5.3
• CVE-2026-3593A use-after-free vulnerability exists within the DNS-over-HT…9.8
• CVE-2026-3595The Riaxe Product Customizer plugin for WordPress is vulnera…5.3
• CVE-2026-3596The Riaxe Product Customizer plugin for WordPress is vulnera…9.8
• CVE-2026-3598Use of a Broken or Risky Cryptographic Algorithm vulnerabili…7.5
• CVE-2026-3599The Riaxe Product Customizer plugin for WordPress is vulnera…7.5
• CVE-2026-3600The Investi plugin for WordPress is vulnerable to Stored Cro…6.4
• CVE-2026-3601The User Registration & Membership plugin for WordPress is v…4.3