Drupal warns of critical Commerce Core flaw actively exploited in attacks

Drupal warned administrators about a critical access-bypass vulnerability in the Commerce Core module that attackers are actively exploiting.