CVE-2026-17581 | WooCommerce WCPOS Plugin up to 1.9.14 on WordPress Receipt_Renderer_Factory include code injection

August 16, 2026 Yanac

A vulnerability was found in WooCommerce WCPOS Plugin up to 1.9.14 on WordPress and classified as problematic. Affected by this vulnerability is the function include of the component Receipt_Renderer_Factory. Such manipulation leads to code injection.

This vulnerability is traded as CVE-2026-17581. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More