WooCommerce Anti-Fraud

WooCommerce Anti-Fraud has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.4 out of 10.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for WooCommerce Anti-Fraud has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WooCommerce Anti-Fraud vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.4

WooCommerce Anti-Fraud <= 3.2 - Insecure Direct Object Reference

Read the full analysis

Vulnerability Records

2 records


2026-06-08 00:00	WooCommerce Anti-Fraud <= 7.2.6 - Missing Authorization WooCommerce Anti-Fraud <= 7.2.6	`CVE-2026-49072`	5.3 Medium	Austin Ginder	Yes
2020-11-22 00:00	WooCommerce Anti-Fraud <= 3.2 - Insecure Direct Object Reference WooCommerce Anti-Fraud <= 3.2	`N/A`	5.4 Medium	Brian Henry	Yes

Showing 1–2 of 2 reports