Read the docs

Wc Fields Factory Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wc Fields Factory Project records in CISA KEV

No Wc Fields Factory Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wc Fields Factory 1 record HIGH

Records

1 record in Wc Fields Factory · all components

TI-2023-00262 CVE-2023-0277 · GHSA-wm33-pqcr-3wpj

WC Fields Factory <= 4.1.5 - ShopManager+ SQLi

Priority HIGH 67

The WC Fields Factory WordPress plugin through 4.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00909 Published 2023-04-17 No fix listed
Open these records in search →