CVE-2026-32551

CriticalCVSS 9.3/10Last modified Oct 12, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DiviNext Woo Essential allows SQL Injection.

This issue affects Woo Essential: from n/a through 4.3.0.

Metrics

CVSS 3.1 9.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Aug 24, 2026
Last modified
Oct 12, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-325528.5Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.CVE-2026-325537.2Unauthenticated Server Side Request Forgery (SSRF) in OttoKit <= 1.1.35 versions.CVE-2026-325549.3Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.CVE-2026-325559.3Unauthenticated SQL Injection in Boost <= 2.0.4 versions.CVE-2026-325567.1Unauthenticated Cross Site Scripting (XSS) in Boost <= 2.0.4 versions.CVE-2026-325579.3Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions.CVE-2026-325589.8Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.CVE-2026-325599.9Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.CVE-2026-32569.8HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids. HTTP::Session defaults to using HTTP::SessiCVE-2026-325608.8Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versions.CVE-2026-325618.8Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions.CVE-2026-325625.4Missing Authorization vulnerability in WP Folio Team PPWP password-protect-page allows Exploiting Incorrectly Configured Access Control Secu
CVE-2026-32551: Critical severity, CVSS 9.3 | Vulnix