News The Patch Existed for Seven Months. The Attacks Didn’t Care. by Rebecca Sutton September 23, 2026 by Rebecca Sutton September 23, 2026 Third party plugin risk, not clever malware, is why a critical WooCommerce flaw patched in February is still being exploited in September. FacebookTwitterLinkedinEmail