CVE-2021-32789

🗓️ 26 Jul 2021 16:15:00Reported by AttackerKBType

woocommerce-gutenberg-products-block SQL injection vulnerability between version 2.5.0 and prior to version 2.5.1

Reporter	Title	Published	Views	Family All 16
GithubExploit	Exploit for SQL Injection in Automattic Woocommerce_Blocks	17 Feb 202319:51	–	githubexploit
GithubExploit	Exploit for SQL Injection in Automattic Woocommerce_Blocks	8 Feb 202419:02	–	githubexploit
Circl	CVE-2021-32789	26 Jul 202120:11	–	circl
CNNVD	WordPress SQL注入漏洞	26 Jul 202100:00	–	cnnvd
CNVD	WordPress WooCommerce Blocks SQL plugin injection vulnerability	28 Jul 202100:00	–	cnvd
Check Point Advisories	WordPress WooCommerce Gutenberg Blocks Plugin SQL Injection (CVE-2021-32789)	30 Dec 202100:00	–	checkpoint_advisories
CVE	CVE-2021-32789	26 Jul 202115:30	–	cve
Cvelist	CVE-2021-32789 Arbitrary SQL (SQL injection) possible via the Store API component.	26 Jul 202115:30	–	cvelist
Nuclei	WooCommerce Blocks 2.5 to 5.5 - Unauthenticated SQL Injection	20 Jul 202605:01	–	nuclei
NVD	CVE-2021-32789	26 Jul 202116:15	–	nvd

Vulners

Node

Source	Link
wooengineering	www.wooengineering.wordpress.com/2021/07/14/incident-report-sql-injection-via-store-api/
github	www.github.com/woocommerce/woocommerce-gutenberg-products-block-ghsa-6hq4-w6wv-8wrp/pull/1
hackerone	www.hackerone.com/reports/1260787
github	www.github.com/woocommerce/woocommerce-gutenberg-products-block/security/advisories/GHSA-6hq4-w6wv-8wrp
github	www.github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32789.yaml
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
woocommerce	www.woocommerce.com/posts/critical-vulnerability-detected-july-2021/

24 Feb 2026 22:27Current

7High risk

Vulners AI Score7

CVSS 3.17.5

CVSS 25

EPSS0.17227