Woocommerce Lottery
by WordPress
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-32580 | Hig | 0.49 | 7.5 | 0.00 | Oct 6, 2026 | Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions. | ||
| CVE-2026-18884 | Hig | 0.49 | 7.5 | 0.00 | Aug 26, 2026 | The WooCommerce Lottery plugin for WordPress is vulnerable to Time-Based SQL Injection via 'orderby' and 'order' GET Parameters in all versions up to, and including, 2.2.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the… |
- risk 0.49cvss 7.5epss 0.00
Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.
- risk 0.49cvss 7.5epss 0.00
The WooCommerce Lottery plugin for WordPress is vulnerable to Time-Based SQL Injection via 'orderby' and 'order' GET Parameters in all versions up to, and including, 2.2.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…