VYPR

VidShop – Shoppable Videos for WooCommerce

by WordPress

CVEs (1)

  • CVE-2026-0702HigJan 28, 2026
    risk 0.49cvss 7.5epss 0.00

    The VidShop – Shoppable Videos for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation…