CVE Catalog
CVE-2026-66436
CriticalCVSS 9.3Summary
Unauthenticated SQL Injection vulnerability in Active Products Tables for WooCommerce versions up to 1.1.1. An attacker can execute arbitrary SQL queries without authentication.
Risk Assessment
Risk includes unauthorized access to the database, potentially leading to data leakage, modification, or deletion.
Recommendation
Update the plugin to the latest patched version. Restrict access to the admin panel and monitor logs for suspicious queries.
Original NVD description (English source)
Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.