CVE-2026-32550 WordPress Kadence Shop Kit plugin <= 3.0.6 - SQL Injection vulnerability

HighCVSS 8.5 EPSS 0.36%

Description

Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.

Product	Affected versions	Fixed in
Liquid Web, LLC Kadence Shop Kit	< 3.0.6.1	3.0.6.1
wordpress kadence-shop-kit(WordPress)	< 3.0.6.1	3.0.6.1

8.5 High

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

All scores (3)

EPSS (exploitation probability, 30 days): 0.36% (percentile 29.9)
CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.