WooCommerce

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenAug 17, 2026
Last mentionedSep 16, 2026

Timeline

3 articles · newest first

CVE-2026-27540 WooCommerce Flaw Exploited

Attackers are actively exploiting CVE-2026-27540, a critical arbitrary file-upload flaw in the WooCommerce Wholesale Lead Capture WordPress plugin.

SOCRadarSep 16, 11:49 UTC · Sep 16, 2026Exploit / PoCExploitedCVE-2026-275402 · 1 read

Hackers expose donor data from Russian fundraisers for Ukrainians, political prisoners

Hackers breached the Stripe-WooCommerce integrations of Russian fundraisers Davayte and You Are Not Alone, exposing donor emails and partial card details.

The RecordSep 2, 13:06 UTC · Sep 2, 2026Data breach1 · 1 read

[webapps] WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload

An unauthenticated arbitrary file upload exploit was released for a WooCommerce component version 1.5.0, risking site compromise.

Exploit-DBAug 17, 00:00 UTC · Aug 17, 2026Exploit / PoC2 · 1 read

Related CVEs

by mentions

CVE-2026-275403%9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd
published Mar 19, 2026WordPress, E-commercePoC

Appears with

WooCommerceproduct · 2
Satanicthreat actor · 1
WooCommerce Wholesale Lead Captureproduct · 1
TV Rainorganization · 1
TV Rainvictim · 1
Stripevendor · 1
Meduzaorganization · 1
WordPressvendor · 1
Meduzavictim · 1
WordPressproduct · 1
You Are Not Alonevictim · 1
Stripeproduct · 1
Davaytevictim · 1
Automatticvendor · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned Sep 16, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.