CVE-2026-96823

Summary

The vulnerability allows unauthenticated attackers to delete arbitrary customer reviews in WooCommerce stores, potentially leading to loss of valuable user-generated content and impacting trust in product ratings. This represents a significant availability and integrity risk to e-commerce platforms.

Exploitability

Exploitation is straightforward requiring no authentication or special preconditions, as the vulnerability exists in an unauthenticated endpoint that accepts review deletion requests.

Blast radius

The impact could affect all WooCommerce stores running version 5.120.0 or earlier, potentially causing widespread loss of customer reviews and ratings that are critical for product trust and sales conversion.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to WooCommerce 5.121.0 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.