Read the docs

Dpl

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Dpl records in CISA KEV

No Dpl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Product Feed On Woocommerce 1 record LOW Sync Woocommerce Product Feed To Google Shopping 1 record LOW

Records

2 records

TI-2021-06798 CVE-2021-24511 · GHSA-q24x-376x-hj43

Create WooCommerce Product Feeds For 40+ Merchants < 3.3.1.0 - Authenticated SQL Injection

Priority LOW 35

The fetch_product_ajax functionality in the Product Feed on WooCommerce WordPress plugin before 3.3.1.0 uses a `product_id` POST parameter which is not properly sanitised, escaped or validated before inserting to a SQL s…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01533 Published 2021-09-20 Fixed in 3.3.1.0 CWE-89
TI-2021-07346 CVE-2021-25068 · GHSA-623f-rcxf-h2f2

Sync WooCommerce Product feed to Google Shopping <= 1.2.4 - Admin+ SQLi

Priority LOW 34

The Sync WooCommerce Product feed to Google Shopping WordPress plugin through 1.2.4 uses the 'feed_id' POST parameter which is not properly sanitized for use in a SQL statement, leading to a SQL injection vulnerability i…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01301 Published 2022-03-28 No fix listed CWE-89
Open these records in search →