← Database

CVE-2026-109925

N/A CVSS: N/A Published: 2026-11-08 Modified: 2026-11-08

Description

The Productive Commerce WordPress plugin before 1.1.54 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.

Affected Platforms

Unknown

Weakness Type

Unknown

References