← WordPress Vulnerabilities
WordPress security by component

VidShop – Shoppable Videos for WooCommerce

VidShop – Shoppable Videos for WooCommerce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 28, 2026; the highest CVE/CNA score is 7.5.

Plugin slug: vidshop-for-woocommerce

CVE-2026-0702: VidShop – Shoppable Videos for WooCommerce: SQL injection

VidShop – Shoppable Videos for WooCommerce is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.

PublishedJan 28, 2026
Safe version guidanceSee mitigation notes
Safe version
Jan 28, 2026 CVE-2026-0702
VidShop – Shoppable Videos for WooCommerce: SQL injection
VidShop – Shoppable Videos for WooCommerce is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE7.5
NVDPending