CVE-2026-78536

The Robokassa payment gateway for WooCommerce versions up to 1.8.9 is vulnerable to unauthenticated broken access control, allowing attackers to potentially manipulate payment processes without proper authentication. This could lead to unauthorized transactions or data exposure, impacting both merchants and customers. E-commerce platforms utilizing this plugin should prioritize remediation to mitigate potential financial and reputational risks.