CVE-2026-32580

An unauthenticated SQL injection vulnerability exists in WooCommerce Lottery versions up to 2.2.9, allowing attackers to execute arbitrary SQL queries on the database. This can lead to unauthorized data access, data manipulation, or even complete system compromise. E-commerce platforms using affected versions should prioritize patching this vulnerability to safeguard sensitive customer and transaction data.