CVE-2026-82304

The Music Store – WordPress eCommerce plugin, versions before 1.4.5 , is vulnerable to an unauthenticated SQL injection via its paypal-data handler . The root cause is a failure to sanitise and escape user input before it is used in a SQL statement. Because no authentication is required, any visi...