Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-25068

Sync WooCommerce Product feed to Google Shopping <= 1.2.4 - Admin+ SQLi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Sync WooCommerce Product feed to Google Shopping WordPress plugin through 1.2.4 uses the 'feed_id' POST parameter which is not properly sanitized for use in a SQL statement, leading to a SQL injection vulnerability in the admin dashboard

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Sync WooCommerce Product feed to Google Shopping

  • 1.2.4 to ≤ 1.2.4affected

References