CVE-2026-120560

The Active Woot Products Tables for WooCommerce. 100% FREE plugin for WordPress is vulnerable to Media Library File Deletion in all versions up to, and including, 2.1.5 This is due to the gettabledata AJAX handler — registered for unauthenticated access via wpajaxnoprivwootgettabledata — performi...