CVE-2026-88828 | WooCommerce Blacklist Manager Plugin up to 2.3.1 on WordPress authentication bypass

September 28, 2026 Yanac

A vulnerability labeled as critical has been found in WooCommerce Blacklist Manager Plugin up to 2.3.1 on WordPress. This impacts an unknown function. Executing a manipulation can lead to authentication bypass using alternate channel.

This vulnerability is registered as CVE-2026-88828. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More