Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-42773 EUVD-2026-31749GHSA-5ffv-prf8-5rc6

WordPress eMagicOne Store Manager plugin <= 1.3.2 - SQL Injection vulnerability

Published May 25, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eMagicOne eMagicOne Store Manager allows Blind SQL Injection.

This issue affects eMagicOne Store Manager: from n/a through 1.3.2.

Affected products

VendorProductAffectedFixed
eMagicOne eMagicOne Store Manager ≤ 1.3.2 —

References