CVE-2026-2019

🗓️ 18 Feb 2026 06:42:39Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 4 Views

CVE-2026-2019: Cart All In One For WooCommerce allows code injection via the Assign page field; administrators can run PHP.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-2019	18 Feb 202606:42	–	attackerkb
CNNVD	WordPress plugin Cart All In One For WooCommerce 注入漏洞	18 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-2019 Cart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting	18 Feb 202606:42	–	cvelist
NVD	CVE-2026-2019	18 Feb 202607:16	–	nvd
Patchstack	WordPress Cart All In One For WooCommerce plugin <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting vulnerability	18 Feb 202600:01	–	patchstack
Positive Technologies	PT-2026-20296	18 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-2019	19 Feb 202607:28	–	redhatcve
Vulnrichment	CVE-2026-2019 Cart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting	18 Feb 202606:42	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (February 16, 2026 to February 22, 2026)	26 Feb 202616:02	–	wordfence

Vulners

Node

villatheme cart_all_in_one_for_woocommerceRange≤1.1.21wordpress

[
  {
    "vendor": "villatheme",
    "product": "Cart All In One For WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.21",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/woo-cart-all-in-one/trunk/includes/frontend/sidebar-cart-icon.php
plugins	www.plugins.trac.wordpress.org/changeset/3455202/
plugins	www.plugins.trac.wordpress.org/browser/woo-cart-all-in-one/tags/1.1.21/includes/frontend/sidebar-cart-icon.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/25bdb89f-3478-4a1a-8bf0-46e88207eb21

15 Apr 2026 00:35Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.2

EPSS0.00024

SSVC

CWE-74