CVE-2022-4547 Conditional Payment Methods for WooCommerce <= 1.0 - Admin+ SQLi

2023-01-1615:37:50

WPScan

www.cve.org

cve-2022-4547

woocommerce

sql injection

wordpress

security vulnerability

admin users

EPSS

0.001

Percentile

44.8%

JSON

The Conditional Payment Methods for WooCommerce WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by [high privilege users such as admin|users with a role as low as admin.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Conditional Payment Methods for WooCommerce",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "1.0"
      }
    ],
    "defaultStatus": "affected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]