The CVE-2026-81774 vulnerability in the WordPress WooCommerce Product Attachment plugin allows exposure of sensitive system information. Defenders should assess exposure, prioritize remediation, and verify inventory. The vulnerability affects plugin versions up to 2.3.3 and allows Retrieve Embedded Sensitive Data. Defenders need to verify inventory of WooCommerce Product Attachment plugin versions to asse [truncated]
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Extra Fees Plugin for WooCommerce, affecting versions from n/a through <= 4.3.3. This issue allows attackers to perform Cross Site Request Forgery. The vulnerability has a high impact due to its potential for tricking authenticated users into performing unintended actions. The Extra Fees Plugin for WooCommerce is used for adding extra fees du [truncated]
