CVE-2022-0814

Publication date

2022-05-09 16:50:32

Family

WPScan

State

PUBLISHED

Description

The Ubigeo de PerĂº para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections