CVE-2026-19088

The CVE tracks a CSRF vulnerability in the ShopEngine Elementor WooCommerce Builder Addon for WordPress, affecting versions before 4.9.3. An attacker can exploit an authentication endpoint to log a victim into an attacker-controlled account, causing billing and shipping details entered at checkou...