CVE-2026-12994

WCFM – Frontend Manager for WooCommerce <= 6.7.27 - Missing Authorization to Unauthenticated Arbitrary Inquiry Reply Injection via wcfm-my-account-enquiry-manage Controller

List of 1,556 websites affected by CVE-2026-12994

The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
***************.de	Germany	*,*
************.com	United States	*,*
*****.com	United States	*,*
*****.*************.de	Germany	*,*
******.****.net	Bulgaria	*,*
*.*.au	Australia	*,*
***********.com	United States	*,*
***********.com	United States	*,*
************.com	United States	*,*
****.****.com	Bulgaria	*,*
**************.training	GB	*,*
**************.com	United States	,,*
*******.com	United States	,,*
***********.com	United States	,,*
************.com	United States	,,*
***************.de	Germany	,,*
***************.fr	France	,,*
*******************.com	United States	,,*
************.ch	Switzerland	,,*
**********.com	United States	,,*