CVE-2026-96838

An unauthenticated Cross Site Request Forgery (CSRF) vulnerability exists in versions 2.3.1 and earlier of the Blacklist Manager for WooCommerce Anti-Fraud, Blacklist & Checkout Verification, allowing attackers to perform unauthorized actions on behalf of users without their consent. This high-severity flaw could lead to significant security breaches, including unauthorized access to sensitive data or manipulation of transactions. E-commerce platforms utilizing this plugin should prioritize immediate updates to mitigate potential exploitation.