🚨 BREAKING A stranger with no login can upload a PHP file and run it on your WooCommerce store. Request a Quote for WooCommerce (through 2.9.2) has a critical file-upload flaw, and there is no patch yet. Disable the popup quote form now. (CVE-2026-18143) https://suriq.io/blog/request-a-quote-woocommerce-cve-2026-18143 #CVE #infosec #cybersecurity