CVE-2026-84849

Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce <= 2.3 versions.

• Published Sep 3, 2026
• CVSS 6.5 medium
• 0.3% chance of exploitation in the next 30 days (EPSS)

CVE-2026-84849 at the National Vulnerability Database