OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-66631

HIGH · CVSS 7.6 EPSS 0.38%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability affects the MC Woocommerce Wishlist plugin versions up to 1.9.21, allowing for SQL injection attacks that can compromise the integrity of the database and potentially expose sensitive information. Organizations using this plugin should prioritize immediate remediation to mitigate the risk of unauthorized data access and exploitation.

CVE
CVE-2026-66631
Severity
HIGH
CVSS
7.6
EPSS
0.38%

Original NVD Description

Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.