by Kastro
Paper/Archive/CVE-2026-42773

CVE-2026-42773

eMagicOne eMagicOne Store Manager — WordPress eMagicOne Store Manager plugin <= 1.3.2 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3
critical.is priorityof 100
34
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 31.2.312 × 206.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eMagicOne eMagicOne Store Manager allows Blind SQL Injection. This issue affects eMagicOne Store Manager: from n/a through 1.3.2.

Affected

ProductAffectedFixed inSource
eMagicOne Store Managern/a – 1.3.2–CNA

Scores by source

Patchstack (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refpatchstack.com/database/wordpress/plugin/store-manager-connector/vulnerability/wordpress-emagicone-store-manager-plugin-1-3-2-sql-injection-vulnerability?_s_id=cve