PT-2026-25868

CVE-2026-2579

Publicado

2026-03-16

Atualizado

2026-03-17

Descrição por

CVSS 3.1

7.5

Alta

MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WowStore – Store Builder & Product Blocks for WooCommerce plugin for WordPress versions up to and including 4.4.3

Description The WowStore – Store Builder & Product Blocks for WooCommerce plugin for WordPress is susceptible to SQL Injection via the search parameter. Insufficient escaping of user-supplied input and inadequate preparation of existing SQL queries allow unauthenticated attackers to inject additional SQL queries, potentially extracting sensitive information from the database.

Recommendations Versions prior to 4.4.4 should be updated.

Explorabilidade

Correção

Impactos

Pesquisadores

Itthidej Aramsri

Teerachai Somprasong

Waris Damkham

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')