CVE-2026-96828

Summary

This flaw allows an attacker to inject malicious SQL queries, potentially leading to data theft or manipulation. It affects older versions of Category Discount Woocommerce and is considered high risk.

Exploitability

Exploitation requires administrative access and knowledge of the SQL injection vulnerability. It is moderately difficult to exploit.

Blast radius

If exploited, the attacker could gain full control over the database, leading to data loss or unauthorized data access.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Category Discount Woocommerce version 5.18 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.