Drupal says attackers are exploiting a critical access bypass in Commerce Core, the e commerce module used on more than 42,000 sites. Admins should upgrade to 3.3.13 or 8.x-2.41 and audit orders for inconsistencies. di.gg/s/lqleuqwz