CVE-2026-49071

MediumCVSS 6.5

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Summary

The WooCommerce Dropshipping plugin versions up to 5.2.4 contain a vulnerability that allows unauthorized session takeover.

An attacker could exploit this vulnerability to gain access to user accounts, potentially leading to data theft or unauthorized transactions.

It is recommended to update the WooCommerce Dropshipping plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Authentication in WooCommerce Dropshipping <= 5.2.4 versions.