CVE-2026-86785 | WooCommerce Social Commerce for WooCommerce Plugin up to 2.5.4 on WordPress REST API Endpoint authorization

September 23, 2026 Yanac

A vulnerability marked as critical has been reported in WooCommerce Social Commerce for WooCommerce Plugin up to 2.5.4 on WordPress. Affected is an unknown function of the component REST API Endpoint. Performing a manipulation results in missing authorization.

This vulnerability is known as CVE-2026-86785. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More