TI-2021-06694 CVE-2021-24402 · GHSA-x769-h2xc-fqfmWP iCommerce <= 1.1.1 - Authenticated (contributor+) SQL InjectionPriority LOW 39The Orders functionality in the WP iCommerce WordPress plugin through 1.1.1 has an `order_id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04648 · Published 2021-09-20 · No fix listed CWE-89