CVE-2026-24993

CRÍTICO 9.3CVE-2026-24993 · Published 25/03/2026 · updated 17/06/2026

En resumen

CVE-2026-24993 es una vulnerabilidad CRÍTICO (CVSS 9.3).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.29%, mayor que el 22.0% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows Blind SQL Injection.This issue affects Advanced WooCommerce Product Sales Reporting: from n/a through <= 4.1.3.

References

patchstack.com/database/Wordpress/Plugin/webd-woocommerce-advanced-reporting-statistics/vulnerability/wordpress-advanced-woocommerce-product-sales-reporting-plugin-4-1-3-sql-injection-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free