Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: OPMC Component: Woocommerce Dropshipping Clear all filters
TI-2022-03213 CVE-2022-3481 · GHSA-m4wm-6gf3-2xqw

WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi

Priority HIGH 82

The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05296 Published 2022-11-07 Fixed in 4.4 CWE-89