CVE-2026-39497Disclosure

LOWCVSS 7.6 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL Injection.This issue affects FOX: from n/a through <= 1.4.5.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Plugin/woocommerce-currency-switcher/vulnerability/wordpress-fox-plugin-1-4-5-sql-injection-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CVE@CVEnew181d
Disclosure
CVE-2026-39497 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL In… https://www.cve.org/CVERecord?id=CVE-2026-39497
Post summary
The post announces a newly identified SQL injection flaw in the RealMag777 FOX woocommerce‑currency‑switcher plugin, indicating that blind SQL injection is possible but providing no proof‑of‑concept, exploit code, or mitigation details.
00010162
57.1K followersView on X
Infoflowcloud@infoflowcloud181d
Disclosure
🚨*CVE* CVE-2026-39497 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL In… https://www.cve.org/CVERecord?id=CVE-2026-39497 ----- Traducción: CVE-2026-39497 Neu… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑39497 as an SQL Injection vulnerability in the RealMag777 FOX woocommerce‑currency‑switcher plugin, providing basic technical details but no PoC, exploit code, active exploitation, or patch information.
0000050
71 followersView on X

Explore more

Back to dashboard