CVE-2026-22335

HighCVSS 8.5

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Summary

The WooCommerce Frontend Manager – Ultimate plugin versions below 6.7.7 contain a SQL Injection vulnerability that can be exploited by subscribers.

An attacker could exploit this vulnerability to gain access to sensitive data in the database, potentially leading to serious security breaches.

It is recommended to update the plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate < 6.7.7 versions.