CVE-2026-66466

An unauthenticated broken access control vulnerability exists in the Smart Sales Booster for WooCommerce versions up to 2.1.1, allowing attackers to exploit unauthorized access to sensitive functionalities. This could lead to unauthorized actions such as manipulating sales processes or accessing restricted data. E-commerce platforms using this plugin should prioritize patching this vulnerability to mitigate potential exploitation risks.