CVE-2026-59537

The vulnerability allows for SQL injection attacks in the Sender plugin for WooCommerce, affecting versions up to 2.10.22, which could enable attackers to manipulate database queries and potentially access sensitive data. This high-severity flaw poses a significant risk to e-commerce sites using the affected plugin, making it crucial for administrators of these systems to prioritize patching or upgrading to mitigate potential data breaches.