high7.6

CVE-2026-59537

Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions.

Impact

Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

CWE-89

References

NVD record
CVE.org record
https://patchstack.com/database/wordpress/plugin/sender-net-automated-emails/vulnerability/wordpress-sender-newsletter-sms-and-email-marketing-automation-for-woocommerce-plugin-2-10-22-sql-injection-vulnerability?_s_id=cve