Vendor
An authentication bypass vulnerability (CVE-2026-76009) in the Next-Cart Store to WooCommerce Migration WordPress plugin allows unauthenticated attackers to execute arbitrary SQL and delete files, leading to potential site takeover.