Lucene search
HistoryNov 07, 2022 - 10:15 a.m.
CVE-2022-3481
woocommerce
dropshipping
sql injection
rest endpoint
unauthenticated users
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
57.8%
The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injection
Affected configurations
Node
opmcwoocommerce_dropshippingRange<4.4wordpress
Related
wpexploit
wpexploit
WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi
2022-10-17 00:00:00
cvelist
cvelist
CVE-2022-3481 WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi
2022-11-07 00:00:00
patchstack
patchstack
cve
cve
CVE-2022-3481
2022-11-07 10:15:11
wpvulndb
wpvulndb
WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi
2022-10-17 00:00:00
prion
prion
Sql injection
2022-11-07 10:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
57.8%
Related for NVD:CVE-2022-3481