Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:45 a.m.•13 views

CVE-2022-0412

The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the itemid parameter before using it in a SQL statement via the wishlist/removeproduct REST endpoint, allowing unauthenticated attackers to perform SQL...

9.8CVSS7.5AI score0.73998EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2022/02/28 9:06 a.m.•50 views

CVE-2022-0412 TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection

The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the itemid parameter before using it in a SQL statement via the wishlist/removeproduct REST endpoint, allowing unauthenticated attackers to perform SQL...

10AI score0.73998EPSS
SaveExploits2References2
CVE
CVE
•added 2022/02/28 9:06 a.m.•201 views

CVE-2022-0412

The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the itemid parameter before using it in a SQL statement via the wishlist/removeproduct REST endpoint, allowing unauthenticated attackers to perform SQL...

9.8CVSS9.8AI score0.73998EPSS
SaveIn wildExploits2References2Affected Software1
Rows per page
Query Builder