GCVE - cpe:2.3:a:unknown:ni_woocommerce_sales

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:ni_woocommerce_sales_report:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Unknown (`668ca391-a6cc-5e33-879b-83885214de33`)
Product	Ni Woocommerce Sales Report (`acb70f31-e8ca-5d73-856d-0a27a52f6a97`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-78472`	vulnerable	2026-10-13 12:29:30.706648	Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated SQLi via 'sort' Parameter The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks. Published: 2026-09-16T06:00:12.138Z Updated: 2026-09-17T12:39:08.547Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/5bc6a6ec-cc7e-493a-977e-24df51a6c094/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-78474`	vulnerable	2026-10-13 12:29:30.670090	Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated Order and Customer Data Disclosure via 'btn_print' Parameter The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and to search the store's orders by customer name or email address. Published: 2026-09-16T06:00:12.319Z Updated: 2026-09-17T12:38:54.114Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/9518db93-0cd9-4db5-af9b-5371218c8b50/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.