CVE-2026-81799

The vulnerability affects WooCommerce versions up to 4.6.4, allowing unauthenticated users to exploit broken access control mechanisms related to return and exchange functionalities. This could lead to unauthorized access and manipulation of refund processes, potentially resulting in financial loss for businesses. Organizations using affected versions of WooCommerce should prioritize patching to mitigate the risk of exploitation.