CVE-2026-65536

The vulnerability allows unauthenticated Cross Site Request Forgery (CSRF) attacks in versions 4.4.5 and earlier of the WooCommerce shipping plugin, potentially enabling attackers to perform unauthorized actions on behalf of users. This could lead to unauthorized modifications to shipping settings or orders, impacting the integrity of e-commerce operations. Organizations using this plugin should prioritize remediation to protect against potential exploitation.