Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.3%	CVE-2026-42635WooCommerce Simple Auctions · Cross-site Scripting High7.1EPSS 0.3%2026-10-06CVE Database V5CVE-2026-42635 Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions. EPSS 0.3%Vulnerability wpgenie #cwe-79	CVE Database V5	2026-10-06
High	7.5	EPSS 0.3%	CVE-2026-32580WooCommerce Lottery · SQL Injection High7.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-32580 Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions. EPSS 0.3%Vulnerability wpgenie #cwe-89	CVE Database V5	2026-10-06
High	7.5	EPSS 0.3%	CVE-2026-18884WooCommerce Lottery · SQL Injection High7.5EPSS 0.3%2026-08-26CVE Database V5CVE-2026-18884 The WooCommerce Lottery plugin for WordPress contains a high-severity SQL Injection vulnerability in all versions up to and including 2.2.9. This flaw allows unauthenticated attackers to manipulate the 'orderby' and 'order' GET parameters to inject additional SQL commands. Exploitation can lead to unauthorized extraction of sensitive database information. No official patch or remediation guidance is currently available. EPSS 0.3%Vulnerability wpgenie #cwe-89	CVE Database V5	2026-08-26

Showing 1–3 of 3 results