SQL Injection Vulnerability in SIBS WooCommerce Payment Gateway Plugin for WordPress

CVE-2026-1370

What is CVE-2026-1370?

The SIBS WooCommerce payment gateway plugin for WordPress is susceptible to a time-based SQL Injection attack via the 'referencedId' parameter due to inadequate user input sanitization and insufficient preparation of SQL queries. This vulnerability allows authenticated users with Administrator-level access and above to inject additional SQL commands into existing queries. Consequently, attackers could potentially retrieve sensitive data from the database, which poses a significant risk to the integrity and confidentiality of the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References