Description
Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WordPress.com | eShipper Commerce | ≤ 2.16.13 | — |
High · 8.5
CVE-2026-74013
EUVD-2026-63315GHSA-h622-xrc2-7vh7
WordPress eShipper Commerce plugin <= 2.16.13 - SQL Injection vulnerability
Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack