Sql injection

2021-08-0910:15:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.8%

JSON

The Stock in & out WordPress plugin through 1.0.4 lacks proper sanitization before passing variables to an SQL request, making it vulnerable to SQL Injection attacks. Users with a role of contributor or higher can exploit this vulnerability.

CPENameOperatorVersion
out_of_stock_message_for_woocommercele1.0.4

CPE	Name	Operator	Version
	out_of_stock_message_for_woocommerce	le	1.0.4

References

github.com/pang0lin/CVEproject/blob/main/wordpress_Stock-in-and-out_sqli.md

wpscan.com/vulnerability/f903aadd-17af-4ddf-8635-abb3338ac815