CVE-2023-2841

The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...

CVE-2023-2841

CVE-2023-2841 concerns the WordPress plugin Advanced Local Pickup for WooCommerce. The vulnerability is an SQL Injection via the id parameter in versions up to and including 1.5.5 due to insufficient escaping and query preparation. Exploitation requires Administrator-level privileges (authenticat...

WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.5 is vulnerable to SQL Injection

Software Advanced Local Pickup for WooCommerce Type Plugin Vulnerable versions = 1.5.5 Fixed in 1.6.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2841 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID 51d0507c3c65 Credits Marco Wotschka Required...