CVE-2026-39723

An unauthenticated broken access control vulnerability exists in versions of Morning for WooCommerce up to 2.4.1, allowing attackers to bypass security measures and potentially gain unauthorized access to sensitive data. This high-severity flaw poses significant risks to e-commerce platforms utilizing the affected plugin, making it crucial for administrators of these systems to prioritize immediate updates or mitigations.