Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-for-checkout allows Cross Site Request Forgery.This issue affects Extra Fees Plugin for WooCommerce: from n/a through <= 4.3.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🚨*CVE* CVE-2026-39671 Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-for-checkout allows Cross Site Request Forg… https://www.cve.org/CVERecord?id=CVE-2026-39671 ----- Traducción: CVE-2026-39671 Vul… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑39671, a CSRF flaw in Dotstore’s WooCommerce plugin.
CVE-2026-39671 Cross-Site Request Forgery (CSRF) vulnerability in Dotstore Extra Fees Plugin for WooCommerce woo-conditional-product-fees-for-checkout allows Cross Site Request Forg… https://www.cve.org/CVERecord?id=CVE-2026-39671
Post summary
The text announces the CVE-2026-39671 CSRF vulnerability in a WooCommerce plugin and provides a link to the CVE record, but offers no PoC, exploit, or patch details.