Vulnerabilities
Isolate WooCommerce Sites Using Payever Plugin Versions 4.8.2 or Older
The National Vulnerability Database rates CVE-2026-42716 as critical, noting that attackers can inject PHP objects without authentication into affected stores.
WooCommerce
Everything Vector Update has reported about WooCommerce: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Update 3D Product Configurator Past 2.16.2 Now to Fix Critical Unauthenticated RCE Flaw
The NVD rates this remote code execution vulnerability in the 3D Product Configurator plugin as critical due to missing authentication checks.