← WordPress Vulnerabilities
WordPress security by component

ClearSale Total

ClearSale Total is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 24, 2026; the highest CVE/CNA score is 7.5.

Plugin slug: clearsale-total

CVE-2026-8705: ClearSale Total: SQL injection

ClearSale Total is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 3.4.2.

PublishedJun 24, 2026
Known safe version> 3.4.2
Safe version
Jun 24, 2026 CVE-2026-8705
ClearSale Total: SQL injection
ClearSale Total is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 3.4.2.
> 3.4.2
CVE7.5
NVDPending