Lucene search

K
patchstackKrzysztof ZającPATCHSTACK:08E4FC8349B2DD53D436AF01CF28AAE0
HistoryJan 31, 2022 - 12:00 a.m.

WordPress TI WooCommerce Wishlist premium plugin <= 1.40.0 - Unauthenticated Blind SQL Injection (SQLi) vulnerability

2022-01-3100:00:00
Krzysztof Zając
patchstack.com
12

0.085 Low

EPSS

Percentile

94.5%

Unauthenticated Blind SQL Injection (SQLi) vulnerability discovered by Krzysztof Zając in WordPress TI WooCommerce Wishlist premium plugin (versions <= 1.40.0).

Solution

           Update the WordPress TI WooCommerce Wishlist premium plugin to the latest available version (at least 1.40.1).

0.085 Low

EPSS

Percentile

94.5%