Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Techspawn Component: Multiloca Clear all filters
TI-2024-12384 CVE-2024-13341 · GHSA-7p2q-7f39-m8x7

MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.1.11 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via the 'data-id' parameter in all versions up to, and including, 4.1.11 due to insufficient escaping o…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0048 Published 2025-02-01 No fix listed CWE-89