CVE-2026-32551

Woo Essential versions up to 4.3.0 are vulnerable to an unauthenticated SQL injection, allowing attackers to manipulate database queries and potentially gain unauthorized access to sensitive data. The critical severity of this vulnerability (CVSS 9.3) necessitates immediate attention from organizations using affected versions to mitigate the risk of data breaches and exploitation. All users and administrators of Woo Essential should prioritize patching or upgrading to secure their applications against this threat.