CVE-2026-32552

HighCVSS 8.5

Published: 19/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in YITH WooCommerce Membership Premium plugin versions up to 2.33.0. An attacker with subscriber role can exploit this flaw to manipulate database queries.

Risk Assessment

Risk of unauthorized access to or modification of database data, potentially leading to confidentiality and integrity breaches.

Recommendation

Update the YITH WooCommerce Membership Premium plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.