CVE-2026-8705

Name of the Vulnerable Software and Affected Versions ClearSale Total versions prior to 3.4.3

Description An issue exists in the clearsale total push AJAX action where the pagseguro[metodo] POST parameter is not properly sanitized. The handler is accessible to unauthenticated users via wp ajax nopriv clearsale total push. Although a nonce check is present, the failure mechanism is disabled, allowing execution to continue. On servers running PHP versions earlier than 8.0, loose type juggling allows a string to be treated as an integer during a comparison in a switch statement, enabling an attacker to inject malicious SQL into an UPDATE query. This allows unauthenticated attackers to append additional queries to extract sensitive information from the database.

Recommendations Update ClearSale Total to version 3.4.3 or later. As a temporary mitigation, ensure the server is running PHP 8.0 or newer to prevent the type juggling behavior.