Description
Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| impleCode | eCommerce Product Catalog | ≤ 3.5.5 | — |
Critical · 9.3
CVE-2026-52693
EUVD-2026-36900GHSA-rgmr-gwj7-9rrh
WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability
Published Jun 15, 2026 · Updated Jun 15, 2026 · Assigned by Patchstack