clearsale

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

clearsale records in CISA KEV

No clearsale vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-07649 CVE-2026-8705 · GHSA-58pf-7c32-vjf7

ClearSale Total <= 3.4.2 - Unauthenticated SQL Injection

MEDIUM 40

The ClearSale Total plugin for WordPress is vulnerable to SQL Injection via the `pagseguro[metodo]` POST parameter of the `clearsale_total_push` AJAX action in all versions up to, and including, 3.4.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00678 Published 2026-06-24 No fix listed CWE-89

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0