CVE-2026-57777

Опубликовано: 04 сент. 2026

Источник: nvd

CVSS3: 7.6

Описание

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooCommerce allows Blind SQL Injection.

This issue affects WooCommerce: from n/a before 11.0.

Ссылки

https://github.com/woocommerce/woocommerce/pull/67554
https://patchstack.com/database/wordpress/plugin/woocommerce/vulnerability/wordpress-woocommerce-plugin-10-9-4-sql-injection-vulnerability?_s_id=cve

Связанные уязвимости

GHSA-cw46-936q-fjcf

CVSS3: 7.6

github

2 дня назад

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooCommerce allows Blind SQL Injection. This issue affects WooCommerce: from n/a before 11.0.