Lucene search

K
patchstackKrzysztof ZającPATCHSTACK:7B474923BD0CDA01EF4239357F82D2B4
HistoryJan 31, 2022 - 12:00 a.m.

WordPress TI WooCommerce Wishlist plugin <= 1.40.0 - Unauthenticated Blind SQL Injection (SQLi) vulnerability

2022-01-3100:00:00
Krzysztof Zając
patchstack.com
12

0.085 Low

EPSS

Percentile

94.5%

Unauthenticated Blind SQL Injection (SQLi) vulnerability discovered by Krzysztof Zając in WordPress TI WooCommerce Wishlist plugin (versions <= 1.40.0).

Solution

           Update the WordPress TI WooCommerce Wishlist plugin to the latest available version (at least 1.40.1).
CPENameOperatorVersion
ti woocommerce wishlistle1.40.0

0.085 Low

EPSS

Percentile

94.5%