Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-17
Ni WooCommerce Sales Report - Security Vulnerability (CVE-2026-78472)
The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.
PLUGIN
Ni WooCommerce Sales Report
CVE-2026-78472
Risk Score
Threat Entry
Updated 2026-09-17
Ni WooCommerce Sales Report - Security Vulnerability (CVE-2026-78474)
The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and to search the store's orders by customer name or email address.
PLUGIN
Ni WooCommerce Sales Report
CVE-2026-78474
Risk Score
Threat Entry
Updated 2026-06-17
Ni Woocommerce Sales Report - Broken Access Control (CVE-2023-32299)
Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Sales Report ni-woocommerce-sales-report allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ni WooCommerce Sales Report: from n/a through
PLUGIN
Ni Woocommerce Sales Report
CVE-2023-32299
Risk Score