{"uuid": "a528f2d2-73cf-4e07-a657-ae63ade7deeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117239554096140693", "content": "CVE-2026-76009 (HIGH): Next-Cart Store to WooCommerce Migration \u22643.9.8 exposes an auth bypass via REST API. Attackers can execute arbitrary SQL & delete files \u2014 full site compromise possible. Patch status unknown. Details: https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen1990-next-cart-store-to-woocommerce-e35aad4a96ee528d #OffSeq #WordPress #Vuln #Infosec", "creation_timestamp": "2026-09-09T06:00:26.725303Z"}