Productive Commerce vulnerabilities
We track 1 vulnerability in Productive Commerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 8, 2026.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Productive Commerce vulnerabilities
- 8.6 High severity
Productive Commerce: Improper Neutralization of Special Elements used in an SQL Command
The Productive Commerce WordPress plugin before 1.1.54 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.