CVE-2026-65532 Shop manager SQL Injection in Persian Woocommerce SMS <= 7.2.2 versions

Description

Shop manager SQL Injection in Persian Woocommerce SMS <= 7.2.2 versions.

Affected products and versions

Product	Affected versions	Fixed in
Persian Woocommerce SMS 7.2	earliest → 7.2.2	No fix stated

Other CVEs of Persian Woocommerce SMS

The 4 CVEs of Persian Woocommerce SMS →

CVE-2026-22352 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PersianScript… 7.1 High CVE-2025-49315 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PersianScript… 7.6 High CVE-2024-54312 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PersianScript… 7.1 High