Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-4118

Bitcoin / AltCoin Payment Gateway <= 1.7.1 - Unauthenticated SQLi

Description

The Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop WordPress plugin through 1.7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by authenticated users

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop

Default version status: affected

  • 0 to ≤ 1.7.1affected

References