High · 7.6 CVE-2026-96828 EUVD-2026-89880GHSA-5qhc-j438-p2cr

WordPress Category Discount Woocommerce plugin <= 5.18 - SQL Injection vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Vendor: Vidish Product: Category Discount Woocommerce Category: Web / CMS

Description

Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.

Affected products

Vendor	Product	Affected	Fixed
Vidish	Category Discount Woocommerce	≤ 5.18	—

References

https://patchstack.com/database/wordpress/plugin/woo-product-category-discount/vulnerability/wordpress-category-discount-woocommerce-plugin-5-18-sql-injection-vulnerability?_s_id=cve vdb-entry