Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-62173
HistoryJul 19, 2022 - 12:00 a.m.

WordPress plugin WooCommerce code injection vulnerability

2022-07-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
20

0.001 Low

EPSS

Percentile

25.0%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin WooCommerce versions prior to 6.6.0 have a code injection vulnerability that stems from a lack of cleanup and escaping in the payment gateway header. No detailed vulnerability details are currently available.

CPENameOperatorVersion
wordpress woocommercelt6.6.0

0.001 Low

EPSS

Percentile

25.0%