Skip to content
OpenAdvisories

Vendor

clearsale

1 known vulnerabilities.

Products

ClearSale Total 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-8705

    ClearSale Total <= 3.4.2 - Unauthenticated SQL Injection

    The ClearSale Total plugin for WordPress is vulnerable to SQL Injection via the `pagseguro[metodo]` POST parameter of the `clearsale_total_push` AJAX action in all versions up to, and including, 3.4.2. The handler is registered for unauthenticated users (`wp_…

    clearsale ClearSale Total Web / CMS