CVE-2026-57340

The Japanized For WooCommerce plugin version 2.9.12 and earlier contains a vulnerability allowing unauthenticated attackers to bypass access controls. This flaw enables unauthorized access to administrative functions without requiring authentication.

The risk involves potential takeover of the WooCommerce store by an unauthenticated attacker, leading to customer data theft, product manipulation, or store disruption.

Immediately update the Japanized For WooCommerce plugin to the latest available version that fixes this vulnerability. Also review access logs for any suspicious activity.