What is GHSA-4778-xmgc-pc88?

GHSA-4778-xmgc-pc88 is a security advisory published by GitHub Security Advisories with High severity. The Price Drop Alert for Woo Commerce WordPress plugin through 1.1 does not sanitize and escape...

Which CVE IDs does GHSA-4778-xmgc-pc88 cover?

GHSA-4778-xmgc-pc88 covers the following CVE IDs: CVE-2026-87770. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4778-xmgc-pc88?

GHSA-4778-xmgc-pc88 has a CVSS v3 base score of 8.6, published by GitHub Security Advisories.

GHSA-4778-xmgc-pc88HighCVSS 8.6

The Price Drop Alert for Woo Commerce WordPress plugin through 1.1 does not sanitize and escape...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-87770 →

📋 Description

The Price Drop Alert for Woo Commerce WordPress plugin through 1.1 does not sanitize and escape parameters before using them in a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-87770
https://wpscan.com/vulnerability/23bd3a5f-f627-4cd4-a25b-3bc79da79c2a
https://github.com/advisories/GHSA-4778-xmgc-pc88