UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-124647
The TI WooCommerce Wishlist WordPress plugin before 2.0.7 does not sanitise and escape user input before using it in a SQL statement in a front-end endpoint, allowing unauthenticated users to perform SQL injection attacks.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-12T07:51:00.177133+00:00
- Cve id
- CVE-2026-124647
- First seen by Signal
- 2026-11-12T07:52:20+00:00
- Retrieved at
- 2026-11-12T07:52:20+00:00
- Published at
- 2026-11-12T06:17:13.150
- Last modified
- 2026-11-12T06:17:13.150
Explore deeper with Ninja Signal's threat intelligence graph