CVE-2026-109925

The Productive Commerce WordPress plugin (versions prior to 1.1.54 ) is vulnerable to SQL injection . The root cause is the failure to properly sanitise and escape a parameter before its use in a SQL statement, specifically within the Wishlist and Compare handlers . This flaw allows unauthenticat...