The vulnerability identified as CVE-2026-32414 affects the ILLID Advanced Woo Labels plugin for WooCommerce, specifically versions up to and including 2.36. It is classified as an improper control of code generation, commonly known as code injection, which allows remote code inclusion. The CVSS 3.1 base score is 7.2, indicating high severity, with attack vector network, low attack complexity, requiring high privileges, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or remediation details are provided in the available data.

Successful exploitation of this vulnerability could allow an attacker with high privileges to remotely include and execute arbitrary code within the affected plugin environment. This could lead to full compromise of the affected system, including unauthorized data access, modification, or service disruption. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high privilege access to the plugin and monitor for suspicious activity related to Advanced Woo Labels. Avoid exposing the affected plugin to untrusted networks or users with elevated privileges.