CVE-2026-66436

CriticalCVSS 9.3

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

22th percentile - higher than 22% of all known CVEs

Summary

Unauthenticated SQL Injection vulnerability in Active Products Tables for WooCommerce versions up to 1.1.1. An attacker can execute arbitrary SQL queries without authentication.

Risk Assessment

Risk includes unauthorized access to the database, potentially leading to data leakage, modification, or deletion.

Recommendation

Update the plugin to the latest patched version. Restrict access to the admin panel and monitor logs for suspicious queries.

Original NVD description (English source)

Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.