CVE-2026-27378

WooCommerce versions up to 3.1.0 are vulnerable to unauthenticated broken access control, allowing unauthorized users to access and potentially manipulate deposit and partial payment functionalities. This could lead to financial discrepancies and unauthorized transactions. E-commerce operators using affected versions should prioritize remediation to safeguard their payment processes and customer data.