CVE-2026-96823

WooCommerce versions up to 5.120.0 are vulnerable to an unauthenticated arbitrary content deletion flaw in the customer reviews feature, allowing attackers to delete arbitrary reviews without authentication. This could lead to significant reputational damage and loss of customer trust for affected e-commerce sites. Organizations using these versions should prioritize patching to mitigate the risk of exploitation.