Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Zendrop Component: Zendrop Clear all filters
TI-2023-11205 CVE-2023-25960 · GHSA-gwp9-gfc2-vccq

WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to SQL Injection

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zendrop Zendrop – Global Dropshipping zendrop-dropshipping-and-fulfillment allows SQL Injection.This issue affects Zen…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0069 Published 2023-11-03 No fix listed CWE-89