CVE-2022-1057

The Pricing Deals for WooCommerce WordPress plugin, affecting versions through 2.0.2.02 , is vulnerable to an unauthenticated SQL injection . The root cause is the failure to properly sanitize and escape a parameter before its inclusion in a SQL statement triggered via an AJAX action accessible t...

CVE-2023-41240

CVE-2023-41240 concerns the WordPress plugin Pricing Deals for WooCommerce . Affected versions are up to 2.0.3.2 and the issue is described as Missing Authorization / Broken Access Control . It allows an unauthenticated user to exploit a lack of authorization (e.g., via the vtprd_ajax_clone_rule ...