PT-2026-25260 · Illid · Advanced Woo Labels

Trương Hữu Phúc + 1 · Published 2026-03-13 · Updated 2026-03-14 · CVE-2026-32414

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Advanced Woo Labels versions prior to 2.36

Description A flaw exists in the code generation process of ILLID Advanced Woo Labels, allowing for remote code inclusion. The issue is due to improper control of code generation, which can lead to code injection.

Recommendations Update Advanced Woo Labels to a version newer than 2.36.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-32414

Affected Products

Advanced Woo Labels

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-32414 · Security Note
• https://twitter.com/CVEnew/status/2032831438731759954 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/advanced-woo-labels/vulnerability/wordpress-advanced-woo-labels-plugin-2-36-remote-code-execution-rce-vulnerability?_s_id=cve · Note