← All advisories

Critical severity9.3NVD Advisory· Published Jun 15, 2026· Updated Jun 15, 2026

CVE-2026-52693

CVE-2026-52693

Description

Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Ecommerce Product Cataloginferred2 versions
<=3.5.5+ 1 more
- (no CPE)range: <=3.5.5
- (no CPE)range: <=3.5.5
Package: https://wordpress.org/plugins/ecommerce-product-catalog

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/ecommerce-product-catalog/vulnerability/wordpress-ecommerce-product-catalog-plugin-3-5-5-sql-injection-vulnerabilitynvd

News mentions

2

Wordfence Intelligence Weekly WordPress Vulnerability Report (June 8, 2026 to June 14, 2026)
Wordfence Blog · Jun 18, 2026
25 WordPress Plugin CVEs Disclosed in One Day: 11 Critical Flaws Lead the Batch
Vypr Intelligence · Jun 15, 2026