Threat database

CVE-2026-22335 is a high severity SQL Injection vulnerability affecting WooCommerce Frontend Manager – Ultimate versions prior to 6.7.7. It allows an attacker with low privileges to inject SQL commands via subscriber-related inputs, potentially leading to complete compromise of confidentiality and partial denial of service. No official patch or remediation guidance is currently confirmed from the vendor. Users should monitor vendor advisories for updates and apply patches once available.