Vulnerability Bulletins |
CVE-2026-3589 |
|
| Affected software | WORDPRESS |
| The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in admin call non store/WC REST endpoints, and create arbitrary admin users via a CSRF attack for example. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-3589 | |