CVE-2026-96828

An SQL injection vulnerability exists in the Category Discount feature of WooCommerce versions up to 5.18, allowing attackers to manipulate database queries and potentially gain unauthorized access to sensitive data. This high-severity flaw could lead to data breaches or unauthorized actions within the application. E-commerce administrators using affected versions should prioritize patching this vulnerability to safeguard their systems against exploitation.