Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming

Recent reporting highlights a surge of high‑impact active exploitation and supply‑chain incidents. Notable active attacks and disclosures include WooCommerce checkout skimming via a Funnel Builder WordPress plugin flaw, Cisco Catalyst SD‑WAN Controller authentication bypass (CVE‑2026‑20182) exploited for admin access, on‑prem Exchange spoofing/XSS exploitation (CVE‑2026‑42897), fast exploitation attempts against PraisonAI missing‑auth endpoints (CVE‑2026‑44338), a critical Exim BDAT/GnuTLS memory corruption issue (CVE‑2026‑45185), an 18‑year‑old NGINX ngx_http_rewrite_module heap overflow (CVE