CVE-2026-32550

Subscriber SQL Injection in Kadence Shop Kit = 3.0.6 versions...

CVE-2026-32550

CVE-2026-32550 is a SQL Injection vulnerability in the WordPress Kadence Shop Kit plugin , affecting versions ≤ 3.0.6 . The vulnerability requires Subscriber-level privileges (low) and can be exploited over the network with no user interaction, as indicated by the CVSS 3.1 vector (AV:N/AC:L/PR:L/...

CVE-2026-32550 WordPress Kadence Shop Kit plugin <= 3.0.6 - SQL Injection vulnerability

Subscriber SQL Injection in Kadence Shop Kit = 3.0.6 versions...

EUVD-2026-66989

Subscriber SQL Injection in Kadence Shop Kit = 3.0.6 versions...

CVE-2026-32550 WordPress Kadence Shop Kit plugin <= 3.0.6 - SQL Injection vulnerability

Subscriber SQL Injection in Kadence Shop Kit = 3.0.6 versions...

CVE-2026-32550: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Kadence Shop Kit = 3.0.6 versions...

PT-2026-82443

Name of the Vulnerable Software and Affected Versions Kadence Shop Kit versions prior to 3.0.7 Description An issue exists that allows a user with subscriber privileges to perform a SQL Injection. This occurs when the application fails to properly sanitize input used in database queries, allowing...

WordPress Kadence Shop Kit plugin <= 3.0.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dutafi in WordPress Plugin Kadence Shop Kit versions = 3.0.6...