WordPress Price Drop Alert for WooCommerce plugin <= 1.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Theo Antônio Da Fonseca in WordPress Plugin Price Drop Alert for WooCommerce versions = 1.1...

CVE-2026-87770 Price Drop Alert for WooCommerce <= 1.1 - Unauthenticated SQL Injection via product

The Price Drop Alert for Woo Commerce WordPress plugin through 1.1 does not sanitize and escape parameters before using them in a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...

CVE-2026-87770

The Price Drop Alert for WooCommerce WordPress plugin (versions ≤ 1.1 ) is vulnerable to unauthenticated SQL injection due to missing sanitization and escaping of parameters before use in a SQL query on an AJAX action related to product . The vulnerability, discovered by Theo Antônio Da Fonseca ,...