https://advisories.gitlab.com/composer/craftcms/commerce/CVE-2026-32271/
Craft Commerce has a SQL Injection can lead to Remote Code Execution via TotalRevenue Widget |...
CVE-2026-32271 Craft Commerce has a SQL Injection can lead to Remote Code Execution via TotalRevenue Widget: A SQL injection in the Commerce TotalRevenue...