WooCommerce

Everything AppSec Scoop has reported about WooCommerce: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

WooCommerce Email Customizer Patch Needed for High-Severity Remote Code Execution

A flaw in the ThemeHigh plugin allows low-level users to execute code on servers, posing a severe risk to e-commerce sites running versions up to 3.9.5.

Oct 16, 2026

Vulnerabilities

Unpatched WordPress sites face default admin takeover via Abandoned Cart Pro token forgery CVE-2026-97657

A critical authentication bypass in the Abandoned Cart Pro plugin allows attackers to hijack any user account, including administrators, on unpatched installations.

Oct 15, 2026