Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-59586
HistoryJul 28, 2021 - 12:00 a.m.

WordPress WooCommerce Blocks SQL plugin injection vulnerability

2021-07-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
wordpress
woocommerce
sql
injection
vulnerability
php
mysql
open source
application
version 2.5.0
version 2.5.16
database
validation
external input
attackers
security

EPSS

0.105

Percentile

95.1%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers.WooCommerce Blocks plugin is a WordPress open source application plugin.WooCommerce Blocks feature plugin version 2.5.0 and 2.5.16 previously existed SQL injection vulnerability, the vulnerability originated from the lack of database based applications The vulnerability stems from the lack of validation of external input SQL statements, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data.