CVE-2026-2579General

LOWCVSS 7.5 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The WowStore – Store Builder & Product Blocks for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the ‘search’ parameter in all versions up to, and including, 4.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 2 classified signals
Disclosure: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

General

266.7%

Disclosure

133.3%

Referenced assets3 URLs

By indicator

Full discourse3 posts

RedPacket Security@RedPacketSec206d
General
CVE Alert: CVE-2026-2579 - wpxpo - WowStore – Store Builder & Product Blocks for WooCommerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-2579-wpxpo-wowstore-store-builder-product-blocks-for-woocommerce/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-2579 #wpxpo #wowstore-store-builder-and-product-blocks-for-woocommerce
Post summary
The post simply announces CVE‑2026‑2579 with a link to a security advisory, offering no additional technical, exploit, or mitigation details.
0000082
3.6K followersView on X
CVEarity@CVEarity206d
General
⚡ New CVE Alert: CVE-2026-2579 📊 Severity: 7.5 🚨 Risk Level: High 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-2579 #CVE-2026-2579 #CVE #High #Wordpress #CyberSecurity #InfoSec https://t.co/2zfQG95v72
Post summary
The post merely announces the existence of CVE-2026-2579, provides a severity score and affected product, and links to the NVD entry, but offers no deeper technical or practical information.
0000053
101 followersView on X
CVE@CVEnew206d
Disclosure
CVE-2026-2579 The WowStore – Store Builder & Product Blocks for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the ‘search’ parameter in all versions up to, and … https://www.cve.org/CVERecord?id=CVE-2026-2579
Post summary
The WowStore plugin for WordPress is disclosed as vulnerable to SQL injection via the ‘search’ parameter (CVE-2026-2579).
0000076
56.7K followersView on X

Explore more

Back to dashboard