OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-102379

HIGH · CVSS 8.5 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-10-01 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

The vulnerability in VillaTheme BuildKit for WooCommerce allows for blind SQL injection due to improper neutralization of special elements in SQL commands. This could enable an attacker to manipulate database queries, potentially leading to unauthorized data access or data manipulation. Organizations using affected versions of this product should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-102379
Severity
HIGH
CVSS
8.5
EPSS
0.21%

Original NVD Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Blind SQL Injection.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC Builder: from n/a through 1.0.28.