PULSEUnderground Intel

EN VIVO3señales / 24h

FEED

vulnKEV agrega CVE-2025-39964 — Linux / KernelvulnKEV agrega CVE-2026-53266 — Linux / KernelvulnKEV agrega CVE-2025-39682 — Linux / KernelvulnKEV agrega CVE-2026-58704 — Google / PixelvulnKEV agrega CVE-2026-76460 — Cisco / Identity Services EnginevulnKEV agrega CVE-2026-87886 — Acronis / BackupvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-42018 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-85706 — GitLab / Community Edition and Enterprise EditionvulnKEV agrega CVE-2026-86060 — MikroTik / RouterOSvulnKEV agrega CVE-2026-67277 — MikroTik / RouterOSvulnKEV agrega CVE-2026-19490 — Citrix / NetScalervulnKEV agrega CVE-2025-39964 — Linux / KernelvulnKEV agrega CVE-2026-53266 — Linux / KernelvulnKEV agrega CVE-2025-39682 — Linux / KernelvulnKEV agrega CVE-2026-58704 — Google / PixelvulnKEV agrega CVE-2026-76460 — Cisco / Identity Services EnginevulnKEV agrega CVE-2026-87886 — Acronis / BackupvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-42018 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-85706 — GitLab / Community Edition and Enterprise EditionvulnKEV agrega CVE-2026-86060 — MikroTik / RouterOSvulnKEV agrega CVE-2026-67277 — MikroTik / RouterOSvulnKEV agrega CVE-2026-19490 — Citrix / NetScaler

← Todos los CVEs

CVE Watch17 sept 2026

CVE-2026-66631

Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.

CVSS

7.6

Alto

EPSS

0.3%

p21

KEV

—

Exploit Today

6

0-100

Publicado: 17 sept 2026 · Última mod.: 17 sept 2026 · CWE-89

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.

Referencias oficiales

patchstack.comhttps://patchstack.com/database/wordpress/plugin/smart-wishlist-for-more-convert/vulnerability/wordpress-mc-woocommerce-wishlist-plugin-1-9-21-sql-injection-vulnerability?_s_id=cve

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-929267.3 ALT

——6A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partner_preference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.23h CVE-2026-666307.6 ALT

——6Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.23h CVE-2026-666287.6 ALT

——6Shop manager SQL Injection in WP-Lister Lite for eBay <= 3.8.11 versions.23h CVE-2026-666267.6 ALT

——6Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions.23h CVE-2026-666257.6 ALT

——6Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions.23h CVE-2026-666247.6 ALT

——6Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.23h