WooCommerce 4.6.2 was released on November 5 and fixes a bug that allows anonymous users to create an account during checkout even when the “Allow customers to create an account during checkout” setting is disabled.
This bug was exploited by a bot that tries to find vulnerabilities in other plugins installed on the site that require an unprivileged authenticated account. Therefore it is recommended to update to WooCommerce 4.6.2 and to remove user accounts created by the bot to fix this issue.
Remember to create a backup before installing updates.
