Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-0783

Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Multiple Shipping Address Woocommerce WordPress plugin before 2.0 does not properly sanitise and escape numerous parameters before using them in SQL statements via some AJAX actions available to unauthenticated users, leading to unauthenticated SQL injections

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Multiple Shipping Address Woocommerce

  • 2.0 to < 2.0affected

References