Critical PPOM Vulnerability Exposes WordPress Server Files
A critical PPOM vulnerability in WooCommerce product add-ons allows unauthenticated attackers to relocate sensitive WordPress server files into a publicly…
WooCommerce vulnerability
Critical WooCommerce Flaw Can Create Admin Accounts
A critical WooCommerce registration vulnerability can allow unauthenticated visitors to create accounts with Administrator privileges during checkout. CVE-2026-15369 affects vulnerable…
WebToffee PDF Invoices Vulnerability Exposes Server Files
A vulnerability in WebToffee WooCommerce PDF Invoices can allow Subscriber-level users to read sensitive server files through generated invoices. Stores…