CVE-2026-78361

The zipMoney (Zip Co) Payments Plugin for WooCommerce WordPress plugin versions before 2.4.0 fail to perform authorization checks on one of its front-end request handlers and do not restrict which WordPress option name a caller may supply. This allows unauthenticated users to delete arbitrary Wor...