WordPress Order Listener for WooCommerce plugin SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. SQL injection vulnerability exists in versions prior to WordPress Order Listener for WooCommerce plugin 3.2.2, which stems from an arbitrary user-available REST The id parameter passed in the route is not cleaned up and escaped before the SQL statement is spliced. An attacker could exploit this vulnerability to cause SQL injection.