CVE-2026-59547

An unauthenticated broken access control vulnerability exists in the Payment Gateway for PayPal on WooCommerce versions 9.1.4 and earlier, allowing unauthorized users to manipulate payment processes. This could lead to unauthorized transactions or data exposure, posing a significant risk to e-commerce operations. Merchants using affected versions of WooCommerce should prioritize immediate updates to mitigate potential exploitation.