CVE-2026-22335: Wc Lovers Woocommerce Frontend Manager – Ultimate

High severity, CVSS 8.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate < 6.7.7 versions.

Affected products

• Wc Lovers Woocommerce Frontend Manager – Ultimate: before 6.7.7 (fixed in 6.7.7)

Published 2026-06-17. Last modified 2026-06-17.