Lucene search
PRIOn knowledge basePRION:CVE-2022-0948HistoryMay 09, 2022 - 5:15 p.m.
Sql injection
2022-05-0917:15:00
PRIOn knowledge base
www.prio-n.com
6
0.041 Low
EPSS
Percentile
92.2%
The Order Listener for WooCommerce WordPress plugin before 3.2.2 does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection
| CPE | Name | Operator | Version |
|---|---|---|---|
| order_listener_for_woocommerce | lt | 3.2.2 |
Related
patchstack
patchstack
nvd
nvd
CVE-2022-0948
2022-05-09 17:15:08
cnvd
cnvd
WordPress Order Listener for WooCommerce plugin SQL injection vulnerability
2022-05-10 00:00:00
wpexploit
wpexploit
Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
2022-04-12 00:00:00
nuclei
nuclei
WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection
2022-12-03 11:04:00
wpvulndb
wpvulndb
Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
2022-04-12 00:00:00
cvelist
cvelist
CVE-2022-0948 Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
2022-05-09 16:50:41
cve
cve
CVE-2022-0948
2022-05-09 17:15:08