CVE-2026-66436

An unauthenticated SQL injection vulnerability exists in the Active Products Tables of WooCommerce versions up to 1.1.1, allowing attackers to execute arbitrary SQL queries. This critical flaw can lead to unauthorized data access and manipulation, potentially compromising sensitive customer information and site integrity. E-commerce platforms using affected WooCommerce versions should prioritize immediate patching to mitigate risks associated with this vulnerability.