CVE-2026-82304

Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data Handler PUBLISHED

Description (CNA)

The Music Store WordPress plugin before 1.4.5 does not sanitise and escape user input before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.

Affected (CNA)

Vendor / product	Versions
Unknown / Music Store	affected 1.0.245 before 1.4.5

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/0a4d2ffc-a437-430e-a760-d8d7fb388f0c/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.