{"id":"CVE-2022-0814","state":"PUBLISHED","title":"Ubigeo de Peru < 3.6.4 - Unauthenticated SQLi","description":"The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections","publishedAt":"2022-05-09T16:50:32.000Z","updatedAt":"2024-08-02T23:40:04.430Z","severity":null,"assigner":"WPScan","products":["Unknown Ubigeo de Perú para Woocommerce y WordPress"],"affected":[{"vendor":"Unknown","product":"Ubigeo de Perú para Woocommerce y WordPress","versions":[{"version":"3.6.4","status":"affected","lessThan":"3.6.4","versionType":"custom"}]}],"references":["https://wpscan.com/vulnerability/fd84dc08-0079-4fcf-81c3-a61d652e3269"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T19:49:26.075Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/0xxx/CVE-2022-0814.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-0814","state":"PUBLISHED","datePublished":"2022-05-09T16:50:32.000Z","dateUpdated":"2024-08-02T23:40:04.430Z","assignerShortName":"WPScan","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateReserved":"2022-03-01T00:00:00.000Z"},"containers":{"cna":{"title":"Ubigeo de Peru < 3.6.4 - Unauthenticated SQLi","descriptions":[{"lang":"en","value":"The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections"}],"affected":[{"vendor":"Unknown","product":"Ubigeo de Perú para Woocommerce y WordPress","versions":[{"version":"3.6.4","status":"affected","lessThan":"3.6.4","versionType":"custom"}]}],"references":[{"url":"https://wpscan.com/vulnerability/fd84dc08-0079-4fcf-81c3-a61d652e3269","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","description":"CWE-89 SQL Injection","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"WPScan","dateUpdated":"2022-05-09T16:50:32.000Z","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81"},"credits":[{"lang":"en","value":"cydave"}],"source":{"discovery":"EXTERNAL"},"x_generator":"WPScan CVE Generator","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"contact@wpscan.com","ID":"CVE-2022-0814","STATE":"PUBLIC","TITLE":"Ubigeo de Peru < 3.6.4 - Unauthenticated SQLi"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Ubigeo de Perú para Woocommerce y WordPress","version":{"version_data":[{"version_affected":"<","version_name":"3.6.4","version_value":"3.6.4"}]}}]},"vendor_name":"Unknown"}]}},"credit":[{"lang":"eng","value":"cydave"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections"}]},"generator":"WPScan CVE Generator","problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-89 SQL Injection"}]}]},"references":{"reference_data":[{"name":"https://wpscan.com/vulnerability/fd84dc08-0079-4fcf-81c3-a61d652e3269","refsource":"MISC","url":"https://wpscan.com/vulnerability/fd84dc08-0079-4fcf-81c3-a61d652e3269"}]},"source":{"discovery":"EXTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://wpscan.com/vulnerability/fd84dc08-0079-4fcf-81c3-a61d652e3269","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T23:40:04.430Z"}}]}}}