Security News > 2021 > July > Zero-Day Attacks on Critical WooCommerce Bug Threaten Databases

Zero-Day Attacks on Critical WooCommerce Bug Threaten Databases
2021-07-15 20:50

A critical SQL-injection security vulnerability in the WooCommerce e-commerce platform and a related plugin has been under attack as a zero-day bug, researchers have disclosed.

The exploitation prompted WooCommerce to release an emergency patch for the issue late on Wednesday.

The related plugin affected by the bug is the WooCommerce Blocks feature, which is installed on more than 200,000 sites.

The vulnerability affects versions 3.3 to 5.5 of the WooCommerce plugin and WooCommerce Blocks 2.5 to 5.5 plugin.

If your storefront is using WooCommerce version 5.3, you can update to version 5.3.1 to minimize the risk of compatibility issues."

WooCommerce is also recommending administrative password resets after updating to provide additional protection.


News URL

https://threatpost.com/zero-day-attacks-woocommerce-databases/167846/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Woocommerce 32 0 41 19 2 62