Known vulnerabilities in Unknown Productive Commerce
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-109925 | Productive Commerce < 1.1.54 - Unauthenticated SQLi via Wishlist and Compare Handlers | Not rated | Nov 8, 2026 |
| CVE-2026-109926 | The Productive Commerce WordPress plugin before 1.1.49 does not perform a capability check in one of its AJAX actions… | 4.3 Medium | Oct 21, 2026 |