Drupal Commerce Core vulnerability exploited against online stores

Drupal warns that a highly critical access bypass vulnerability in the Commerce Core module is being actively exploited against online stores. The vulnerability may financially impact vendors.