Vulnerabilities
Single POST Request Enables Unauthenticated Code Execution in WooCommerce 3D Plugin
The NVD rates this flaw as critical, allowing attackers to bypass authentication checks and run server-side code on vulnerable sites.
WooCommerce
Everything BitShield News has reported about WooCommerce: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVE-2026-104801: Critical PPOM Plugin Flaw Risks Full Site Compromise via Unauthenticated RCE
A critical vulnerability in the PPOM WooCommerce plugin allows attackers to delete server files and execute code without authentication, risking full site compromise.