TI-2024-00565 CVE-2024-0610 · GHSA-v8mc-4rh6-jf98Piraeus Bank WooCommerce Payment Gateway <= 1.6.5.1 - Unauthenticated SQL InjectionPriority MEDIUM 50The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'MerchantReference' parameter in all versions up to, and including, 1.6.5.1 due to insufficient es…CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00653 · Published 2024-02-17 · No fix listed CWE-89