CVE-2026-66628

WP-Lister Lite for eBay versions up to 3.8.11 are vulnerable to SQL Injection attacks via the shop manager functionality, allowing attackers to manipulate database queries. This vulnerability could lead to unauthorized access to sensitive data or complete system compromise. E-commerce platforms utilizing this plugin should prioritize patching to mitigate potential exploitation risks.