FunnelKit, a WooCommerce plugin on 30,000+ stores, has a flaw that lets anyone with no login read the billing name, address, email and phone on any order. Exposed only if your thank-you page shows FunnelKit order data. Fix: update to 3.17.0. (CVE-2026-107746) https://suriq.io/blog/funnelkit-cve-2026-107746-woocommerce-pii-leak #CVE #DataBreach #infosec #cybersecurity