CVE-2026-73181

WooCommerce versions prior to 7.6 are vulnerable to an unauthenticated arbitrary file download, allowing attackers to access sensitive files on the server without authentication. This could lead to data exposure and potential exploitation of the underlying system. E-commerce businesses using affected WooCommerce versions should prioritize patching to mitigate this high-severity risk.