CVE-2026-3589 | Automattic WooCommerce Plugin up to 10.5.2 on WordPress WC REST Endpoint cross-site request forgery

A vulnerability was found in Automattic WooCommerce Plugin on WordPress and classified as problematic. This issue affects some unknown processing of the component WC REST Endpoint. Such manipulation leads to cross-site request forgery.

This vulnerability is referenced as CVE-2026-3589. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.