---
id: "CVE-2026-123703"
page: "https://infrastack.ai/live/CVE-2026-123703"
kind: "vulnerability"
aliases: ["CVE-2026-123703"]
title: "Security For WooCommerce WordPress plugin lets anyone log out users"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["package", "security-for-woocommerce", "woocommerce", "wordpress"]
not_affected_if: ["plugin-not-installed"]
published_at: "2026-11-11T06:17:19+00:00"
first_seen_at: "2026-11-11T06:25:44+00:00"
updated_at: "2026-11-11T06:27:10+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123703", "first_seen_at": "2026-11-11T06:25:44+00:00"}]
exploit_sources: []
---

# Security For WooCommerce WordPress plugin lets anyone log out users

Link for people: https://infrastack.ai/live/CVE-2026-123703 (this .md is for agents)

The Security For WooCommerce WordPress plugin through 1.0.16 does not check authorisation before ending login sessions. An unauthenticated visitor can log out any user, including administrators, and keep them logged out by repeating the request.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the `Security For WooCommerce` plugin is installed and its version is `1.0.16` or earlier in the WordPress admin plugin list

## Timeline

- 2026-11-11T06:25:44+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123703

## From the sources

The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before ending a user's login sessions, allowing unauthenticated visitors to log out any user, including administrators, and to keep them logged out by repeating the request.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_