CVE-2026-123700

The Security For WooCommerce WordPress plugin, versions through 1.0.16 , contains a vulnerability where it fails to verify requester authorization before executing certain comment cleanup actions . This allows unauthenticated users to perform permanent deletion of all site comments, including app...