The vulnerability identified as CVE-2026-32414 affects the Advanced Woo Labels plugin by ILLID, versions up to and including 2.36. It is categorized as an improper control of code generation, specifically a code injection vulnerability that permits remote code inclusion. The CVSS 3.1 base score is 7.2, indicating high severity, with network attack vector, low attack complexity, and requiring high privileges but no user interaction. Successful exploitation impacts confidentiality, integrity, and availability.

Exploitation of this vulnerability could allow an attacker with high privileges to remotely include and execute arbitrary code within the context of the affected plugin, potentially leading to full system compromise. This includes unauthorized disclosure of information, modification of data, and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. In the meantime, restrict access to high-privilege accounts and consider disabling or removing the affected plugin if feasible.