Immediate Patch Required

Hi @idayras ,

Thanks for reaching out.

It looks like that email might be part of a phishing scam. WooCommerce hasn’t sent any official statement like the one you mentioned, and we’ve recently identified a phishing campaign targeting store owners with fake warnings about security vulnerabilities.

These emails are designed to look legitimate but contain false information — there’s no real vulnerability as claimed. You can find more details and safety tips in our advisory here: https://developer.woocommerce.com/2025/04/22/dev-advisory-phishing-campaign-targeting-woocommerce-stores/

I hope this clears things up!

Hi @idayras ,

I’m really glad we were able to point you in the right direction!

If you have a moment, we’d really appreciate it if you could share your experience by leaving us a review: https://wordpress.org/support/plugin/woocommerce/reviews. Your feedback helps us keep improving!

Please don’t hesitate to create a new topic if you need further assistance.

Cheers!