CVE-2026-109231

The Germanized for WooCommerce plugin for WordPress (versions

CVE-2026-109231: vendidero Germanized for WooCommerce: The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation…

The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation Token Reuse in versions up to, and including, 4.1.4. This is due to the onuseremailchanged hook — which is responsible for rotating the activation token and recording a...