Advisories · Technology

Productive Commerce.

Every CVE that names Productive Commerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109925 CVE record

CVSS 8.6 High

Productive Commerce < 1.1.54 - Unauthenticated SQLi via Wishlist and Compare Handlers
- Productive Commerce
- SQL injection
Not analysed yet 8 Nov 2026
CVE-2026-109926 CVE record

CVSS 4.3 Medium

Productive Commerce < 1.1.49 - Subscriber+ Arbitrary Plugin Activation
- Productive Commerce
- Broken access control
Not analysed yet 21 Oct 2026