PT-2026-103222 · Yoohw Studio · Blacklist Manager – Woocommerce Anti-Fraud

Mor Golan

·

CVE-2026-96838

·

Published

2026-09-30

·

Updated

2026-09-30

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification <= 2.3.1 versions.

Fix

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2026-96838

Affected Products

Blacklist Manager &#8211; Woocommerce Anti-Fraud