VYPR

Price Drop Alert for Woo Commerce

by WordPress

CVEs (1)

  • CVE-2026-87770Sep 18, 2026
    risk 0.00cvss epss

    The Price Drop Alert for Woo Commerce WordPress plugin through 1.1 does not sanitize and escape parameters before using them in a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract…