CVE-2022-0478

The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not validate and escape the postauthorgutenberg parameter before using it in a SQL statement when creating/editing events, which could allow users with a role as low as contributor to perform SQL Injection...

PT-2022-13203

Name of the Vulnerable Software and Affected Versions The Event Manager and Tickets Selling for WooCommerce WordPress plugin versions prior to 3.5.8 Description The issue concerns a lack of validation and escaping for the post author gutenberg parameter in SQL statements when creating or editing...

WordPress plugin: WooCommerce SQL injection vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. SQL injection vulnerability exists in versions of...