{"metadata": {"vulnerability": "CVE-2026-97668", "count": 17, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-24T20:25:04.463Z", "date_only": false, "value": "2026-09-24T20:25:04.463Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-97668", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T13:53:38Z", "date_only": false, "value": "2026-10-13T13:53:38.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-97668", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-14T02:27:37.892Z", "date_only": false, "value": "2026-10-14T02:27:37.892Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-97668", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T02:27:37.892Z", "date_only": false, "value": "2026-10-14T02:27:37.892Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-97668", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T03:17:37Z", "date_only": false, "value": "2026-10-14T03:17:37Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XC7M-7P9H-4HFM", "record": "GHSA-XC7M-7P9H-4HFM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T03:17:37.797Z", "date_only": false, "value": "2026-10-14T03:17:37.797", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97668", "record": "FKIE_CVE-2026-97668", "field": "published"}, {"timestamp": "2026-10-14T03:30:40Z", "date_only": false, "value": "2026-10-14T03:30:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XC7M-7P9H-4HFM", "record": "GHSA-XC7M-7P9H-4HFM", "field": "published"}, {"timestamp": "2026-10-14T03:30:40Z", "date_only": false, "value": "2026-10-14T03:30:40Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XC7M-7P9H-4HFM", "record": "GHSA-XC7M-7P9H-4HFM", "field": "modified"}, {"timestamp": "2026-10-14T04:08:00.185Z", "date_only": false, "value": "2026-10-14T04:08:00.185324Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxsodtx4h62n", "record": "CVE-2026-97668", "field": "creation_timestamp", "uuid": "7dfb7de5-45a9-40ad-878e-524c21abfd3d", "content": "\ud83d\udea8 CVE-2026-97668 \u2014 CVSS 9.8 CRITICAL\n\nThe Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest ca...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97668\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxsodtx4h62n"}, {"timestamp": "2026-10-14T04:11:14.852Z", "date_only": false, "value": "2026-10-14T04:11:14.852933Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bsext3qwwfmpd", "record": "CVE-2026-97668", "field": "creation_timestamp", "uuid": "400cef84-fac3-425a-ba06-c8b99d6d660c", "content": "CVE-2026-97668 - Abandoned Cart Pro for WooCommerce\nCVE ID : CVE-2026-97668\n \n Published : Oct. 14, 2026, 3:17 a.m. | 15\u00a0minutes ago\n \n Description : The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_v...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/bsext3qwwfmpd"}, {"timestamp": "2026-10-14T08:30:04.453Z", "date_only": false, "value": "2026-10-14T08:30:04.453878Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxt4yhmeym2h", "record": "CVE-2026-97668", "field": "creation_timestamp", "uuid": "a117fc24-a612-4e3a-aef4-a7ef95d290a9", "content": "CVE-2026-97668 - abandoned cart pro for woocommerce\nThe Abandoned Cart Pro for WooCommerce plugin can be tricked by any visitor to run hidden database commands. This can let an attacker read data or change a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tychesoftwares #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxt4yhmeym2h"}, {"timestamp": "2026-10-14T16:27:35.668Z", "date_only": false, "value": "2026-10-14T16:27:35.668804Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440201046618374", "record": "CVE-2026-97668", "field": "creation_timestamp", "uuid": "f60225ce-384d-4c4d-9bf4-c9d6e5b783d4", "content": "CVE-2026-97668 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the update_guest_persistent_cart() function. The abandoned_cart_info value, populated from attacker-controlled checkout fields such as the SMS consent field, is passed through stripslashes() and concatenated directly into an UPDATE statement while the adjacent SELECT and INSERT use prepared statements. This makes it possible for unauthenticated attackers to append additional SQL to the query. Because the sink is an UPDATE ... SET on the wp_usermeta table, the injection can both extract sensitive information from the database via time-based blind techniques and modify usermeta rows; it has been demonstrated to escalate an arbitrary account to administrator by writing a wp_capabilities row that shadows the legitimate one.\nhttps://www.cve.org/CVERecord?id=CVE-2026-97668https://www.wordfence.com/threat-intel/vulnerabilities/id/9d91ffee-6902-4553-af3b-8ef4e5199367?source=cvehttps://www.tychesoftwares.com/products/woocommerce-abandoned-cart-pro-plugin/https://www.tychesoftwares.com/docs/docs/abandoned-cart-pro-for-woocommerce-new/changelog-abandoned-cart-pro/#TycheSoftwares #AbandonedCartProforWooCommerce#CVE_2026_97668#bot", "url": "https://infosec.exchange/users/cve/statuses/117440201046618374"}, {"timestamp": "2026-10-15T10:52:33.650Z", "date_only": false, "value": "2026-10-15T10:52:33.650399Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-97668", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T10:52:33.650Z", "date_only": false, "value": "2026-10-15T10:52:33.650399Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97668", "record": "FKIE_CVE-2026-97668", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T16:43:50.779Z", "date_only": false, "value": "2026-10-15T16:43:50.779Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-97668", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T16:43:50.779Z", "date_only": false, "value": "2026-10-15T16:43:50.779Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-97668", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T17:17:34.090Z", "date_only": false, "value": "2026-10-15T17:17:34.090", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97668", "record": "FKIE_CVE-2026-97668", "field": "lastModified"}]}