CVE-2026-96838

Summary

Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification <= 2.3.1 versions.

Affected Software

VendorProductVersion RangeStatus
YoOhw StudioBlacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verificationn/a <= 2.3.1affected

Weaknesses

  • CWE-352: CWE-352 Cross-Site Request Forgery (CSRF)

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References