CVE-2025-69129 and CVE-2025-69131 affect WordPress & WooCommerce Scraper Plugin through 1.0.7. Remove it, replace the import workflow, and verify WooCommerce.
Gift Cards For WooCommerce Pro CVE-2026-45444 affects versions through 4.2.6. Disable or replace the plugin if no fixed release is available.
Patch FunnelKit Funnel Builder to 3.15.0.3 or newer after active attacks placed malicious scripts on WooCommerce checkout pages.
Patch Mentoring CVE-2025-13618 and MoreConvert Pro CVE-2026-5722, then review WordPress administrator, customer, and WooCommerce account activity.
Patch Avada Builder CVE-2026-8713 by updating Fusion Builder to 3.15.4 or later, then verify forms, WooCommerce records, users, backups, and caches.
Updated Elementor Pro 3.11.6 security cleanup guide: patch Elementor Pro, audit users, review WooCommerce, clear caches, and plan replacement if needed.
