EUVD-2026-66954
GHSA-mjcr-7742-f9xh
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Network-reachable, low-complexity SQL injection requires contributor authentication; scope change reflects cross-table database read; I:N reflects confirmed read-only injection path.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Lifecycle Timeline
2DescriptionCVE.org
Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions.
AnalysisAI
SQL Injection in VillaTheme's Suggestion Engine for WooCommerce plugin (versions ≤ 2.0.11) enables contributor-level authenticated WordPress users to inject malicious SQL through the suggestion engine functionality. The CVSS scope-change indicator (S:C) confirms the injection can reach data beyond the plugin's own tables, exposing the broader WordPress MySQL database with high confidentiality impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold at least contributor-level authentication on the WordPress installation, as confirmed by the CVSS PR:L metric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.5 High score is driven by network reachability (AV:N), low attack complexity (AC:L), only contributor-level authentication required (PR:L), no user interaction (UI:N), scope change (S:C), and high confidentiality impact (C:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker registers a free contributor account on a WooCommerce storefront running the vulnerable plugin, or compromises an existing contributor's credentials through credential stuffing. They then send a crafted HTTP request to the plugin's suggestion engine endpoint - for example, a product autocomplete or search suggestion handler - embedding a SQL UNION or blind injection payload in a user-controlled parameter. … |
| Remediation | The primary remediation is to update the Suggestion Engine for WooCommerce plugin to a version beyond 2.0.11. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: audit all WordPress instances running Suggestion Engine ≤2.0.11 and identify all contributor-level accounts currently active. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today