Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/02/05 1:22 p.m.3 views

CVE-2026-1370

The SIBS woocommerce payment gateway plugin for WordPress is vulnerable to time-based SQL Injection via the ‘referencedId’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

4.9CVSS5.8AI score0.00013EPSS
Exploits0References1
NVD
NVD
added 2026/02/04 9:15 a.m.5 views

CVE-2026-1370

The SIBS woocommerce payment gateway plugin for WordPress is vulnerable to time-based SQL Injection via the ‘referencedId’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

4.9CVSS0.00013EPSS
Exploits0References2
CVE
CVE
added 2026/02/04 8:25 a.m.8 views

CVE-2026-1370

The CVE describes a time-based SQL Injection in the SIBS WooCommerce payment gateway plugin for WordPress (versions

4.9CVSS5.8AI score0.00013EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/04 8:25 a.m.3 views

CVE-2026-1370

The SIBS woocommerce payment gateway plugin for WordPress is vulnerable to time-based SQL Injection via the ‘referencedId’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

4.9CVSS5.8AI score0.00013EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/04 8:25 a.m.1 views

CVE-2026-1370 SIBS - WooCommerce <= 2.2.0 - Authenticated (Admin+) SQL Injection via 'referencedId' Parameter

The SIBS woocommerce payment gateway plugin for WordPress is vulnerable to time-based SQL Injection via the ‘referencedId’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

4.9CVSS5.8AI score0.00013EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.2 views

PT-2026-6041

Name of the Vulnerable Software and Affected Versions SIBS woocommerce payment gateway plugin for WordPress versions up to and including 2.2.0 Description The SIBS woocommerce payment gateway plugin for WordPress is susceptible to time-based SQL Injection via the referencedId parameter. This is d...

4.9CVSS5.8AI score0.00013EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/02/04 12:0 a.m.4 views

WordPress plugin SIBS woocommerce payment gateway SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

4.9CVSS5.9AI score0.00013EPSS
Exploits0References3
Rows per page
Query Builder