CVE-2026-32551

CriticalCVSS 9.3

Published: 24/08/2026(UTC)Updated: 24/08/2026(UTC)Translated: 24/08/2026(UTC)NVD NIST

Summary

Unauthenticated SQL Injection in Woo Essential versions up to 4.3.0. An attacker can manipulate database queries.

Risk of data theft, database modification, or admin account takeover.

Update Woo Essential to a version newer than 4.3.0 that includes the fix.

Original NVD description (English source)

Unauthenticated SQL Injection in Woo Essential <= 4.3.0 versions.