BTCPay Server updates optional WooCommerce/WordPress deployment following disclosure of a critical PHP vulnerability

BTCPay Server's Docker installer includes an optional WooCommerce/WordPress deployment; it was updated following disclosure of a critical PHP vulnerability. Merchants whose WooCommerce stores were deployed specifically through the BTCPay installer are affected. Until the update is applied, the publicly accessible PHP stack of the payment frontend remains on a vulnerable version. The message does not give a CVE number or details of the vulnerability's nature.