| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
| Exploit for SQL Injection in Automattic Woocommerce_Blocks | 17 Feb 202319:51 | – | githubexploit | |
| Exploit for SQL Injection in Automattic Woocommerce_Blocks | 8 Feb 202419:02 | – | githubexploit | |
| CVE-2021-32789 | 26 Jul 202100:00 | – | attackerkb | |
| CVE-2021-32789 | 26 Jul 202120:11 | – | circl | |
| WordPress SQL注入漏洞 | 26 Jul 202100:00 | – | cnnvd | |
| WordPress WooCommerce Blocks SQL plugin injection vulnerability | 28 Jul 202100:00 | – | cnvd | |
| WordPress WooCommerce Gutenberg Blocks Plugin SQL Injection (CVE-2021-32789) | 30 Dec 202100:00 | – | checkpoint_advisories | |
| CVE-2021-32789 Arbitrary SQL (SQL injection) possible via the Store API component. | 26 Jul 202115:30 | – | cvelist | |
| WooCommerce Blocks 2.5 to 5.5 - Unauthenticated SQL Injection | 9 Jun 202605:43 | – | nuclei | |
| CVE-2021-32789 | 26 Jul 202116:15 | – | nvd |
[
{
"product": "woocommerce-gutenberg-products-block",
"vendor": "woocommerce",
"versions": [
{
"status": "affected",
"version": "> 2.5.0, < 2.5.16"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| calculate_attribute_counts[][taxonomy] | query param | wc/store/products/collection-data?calculate_attribute_counts[][taxonomy] | SQL injection via crafted request to wc/store/products/collection-data endpoint allows read-only SQL queries. | CWE-89 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation