Lucene search

K
wpvulndbWpvulndbWPVDB-ID:3CA162A0-8F83-4289-950D-1A995C13B49A
HistorySep 07, 2023 - 12:00 a.m.

WooCommerce PDF Invoice Builder < 1.2.90 - Subscriber+ SQLi

2023-09-0700:00:00
wpscan.com
4
woocommerce
pdf
invoice
sql injection
pageid parameter

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

47.3%

Description The plugin does not properly sanitise and escape the pageId parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

47.3%

Related for WPVDB-ID:3CA162A0-8F83-4289-950D-1A995C13B49A