CVE-2021-24511

The fetchproductajax functionality in the Product Feed on WooCommerce WordPress plugin before 3.3.1.0 uses a productid POST parameter which is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-24511

The fetchproductajax functionality in the Product Feed on WooCommerce WordPress plugin before 3.3.1.0 uses a productid POST parameter which is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-24511

CVE-2021-24511 affects the WooCommerce Product Feed for WordPress (Google product feed) plugin, where fetch_product_ajax uses a product_id POST parameter that is not properly sanitised or validated before being inserted into an SQL statement, enabling SQL injection. Affected versions are prior to...