If you receive one of these emails, rest assured it is a scammy phishing attempt and no actual security vulnerability was discovered in Woocommerce and not patched via the usual route.
Under no circumstances should you click a link, the button or anything inside this email, and it goes without saying, but, don't download or install their malicious plugin.
This is one of the more sophisticated scams, as it tries to hinge on your responsibility for your customers data to hurry you into acting without a second thought. Be careful!
We're extremely cautious about data security and purge our servers in regular intervals, we also have a few security measures in place which would have noticed if there was any "Unauthenticated Administrative Access".
Stay safe, shoprunners.
If you get an email like this, the way to go is to ALWAYS check the official website of the service for announcements and/or release notes.
I did and was pleasantly surprised that Woo already has a warning out about this exact phishing campaign.
Except for the necklace, this is pretty close to a perfect print. Unfortunately there's not much I can do to improve the necklace at this scale, so I'll call it "good enough" for now.
H/t @kellermining
