CVE-2026-8705 | ClearSale Total Plugin up to 3.4.2 on WordPress wp_verify_nonce metodo sql injection

A vulnerability was found in ClearSale Total Plugin up to 3.4.2 on WordPress and classified as critical. Affected by this issue is the function wp_verify_nonce. Executing a manipulation of the argument metodo can lead to sql injection.

This vulnerability is tracked as CVE-2026-8705. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.