PT-2026-61839 · Undefined · Undefined

Bapcorn · CVE-2026-8082 · Publicado 2026-07-21 · Atualizado 2026-07-21

Mitre

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

The bpost-shipping-platform WordPress plugin before 3.2.3 does not properly sanitize a parameter before using it in a SQL query during WooCommerce order submission, allowing unauthenticated attackers to perform time-based blind SQL injection on stores running this bpost-shipping-platform WordPress plugin before 3.2.3.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-8082

Produtos afetados

Undefined

Referências · 2

• 🔥 https://wpscan.com/vulnerability/21b31199-01d5-4c43-8699-eca4bc7e8389 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-8082 · Nota de Segurança