CVE-2026-6932

Name of the Vulnerable Software and Affected Versions Woo Commerce Minimum Weight versions prior to 3.0.2

Description Cross-Site Request Forgery occurs due to missing nonce verification on the settings update handler in the 'edit-weight.php' endpoint. A nonce is a unique token used to prevent the replay of requests. This flaw allows unauthenticated attackers to modify the minimum order weight setting by tricking a site administrator into clicking a link or visiting a page containing a forged POST request.

Recommendations Update to a version newer than 3.0.1.