CVE-2026-32580

wpgenie WooCommerce Lottery

Published 6 Oct 2026 · updated 6 Oct 2026 · Deferred

7.5 High · CVSS 3.1, patchstack.com

Description

Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.

References

patchstack.com/database/wordpress/plugin/wc-lottery/vulnerability/wordpress-woocommerce-lottery-plugin-2-2-9-sql-injection-vulnerability?_s_id=cve