CVE-2026-66436: WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability
Published Aug 13, 2026
·Updated
Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.
Affected Software
1 affected component
WordPress Active Products Tables for WooCommerce plugin<=1.1.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Active Products Tables for WooCommerce Pluginto a version that resolves this vulnerability.Fixed in 2.1.2
Event History
Aug 13, 2026
CVE Published
via MITRE·01:36 PM
Data Sourced
via MITRE·01:36 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-66436?
CVE-2026-66436 has a critical severity rating of 9.3.
2
What is the risk associated with CVE-2026-66436?
CVE-2026-66436 is classified with a risk score of 61.
3
How do I fix CVE-2026-66436?
To fix CVE-2026-66436, update the Active Products Tables for WooCommerce plugin to version 1.1.2 or later.
4
What type of vulnerability is CVE-2026-66436?
CVE-2026-66436 is an unauthenticated SQL Injection vulnerability.
5
Who is affected by CVE-2026-66436?
Users of the Active Products Tables for WooCommerce plugin version 1.1.1 and below are affected by CVE-2026-66436.