CVE-2022-0814 Ubigeo de Peru < 3.6.4 - Unauthenticated SQLi

2022-05-0916:50:32

CWE-89

WPScan

www.cve.org

0.04 Low

EPSS

Percentile

92.2%

JSON

The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections

CNA Affected

[
  {
    "product": "Ubigeo de Perú para Woocommerce y WordPress",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.6.4",
        "status": "affected",
        "version": "3.6.4",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/fd84dc08-0079-4fcf-81c3-a61d652e3269

0.04 Low

EPSS

Percentile

92.2%

JSON

Related for CVELIST:CVE-2022-0814