Post
Pulse WP
pulse-wp.com
did:plc:m7puovzqhxurz66hip2xwfs6
CVE-2026-109220. 9.8/10. PHP Object Injection in PDF Invoice for WooCommerce. Attackers inject malicious objects via checkout notes. Remote code execution. No auth needed. Update to 7.1.1 now. Scan: pulse-wp.com
#WordPress #CVE #CyberSecurity
2026-11-01T00:00:12.486Z