PT-2025-46251

Name of the Vulnerable Software and Affected Versions Woocommerce – Products By Custom Tax plugin for WordPress versions up to and including 2.2 Description The Woocommerce – Products By Custom Tax plugin for WordPress has a Stored Cross-Site Scripting issue related to the woo products custom tax...

CVE-2007-3140

CVE-2007-3140 : SQL injection in WordPress 2.2 affecting the xmlrpc.php module. The vulnerability arises in the XML-RPC method wp.suggestCategories, where an input value is not properly sanitized and can be exploited by an authenticated user to execute arbitrary SQL commands. Exploitation notes i...