Read the docs

Dpl

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Dpl records in CISA KEV

No Dpl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Product Feed On Woocommerce 1 record LOW Sync Woocommerce Product Feed To Google Shopping 1 record LOW

Records

1 record in Product Feed On Woocommerce · all components

TI-2021-06798 CVE-2021-24511 · GHSA-q24x-376x-hj43

Create WooCommerce Product Feeds For 40+ Merchants < 3.3.1.0 - Authenticated SQL Injection

Priority LOW 35

The fetch_product_ajax functionality in the Product Feed on WooCommerce WordPress plugin before 3.3.1.0 uses a `product_id` POST parameter which is not properly sanitised, escaped or validated before inserting to a SQL s…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01533 Published 2021-09-20 Fixed in 3.3.1.0 CWE-89
Open these records in search →