Drupal warns of critical Commerce Core flaw exploited in attacks

Drupal warned administrators about a critical access-bypass vulnerability in the Commerce Core module that attackers are actively exploiting.