Vulnerabilities > CVE-2021-24846 - Unspecified vulnerability in NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

ni-woocommerce-custom-order-status-project

NVD

Published: 2021-12-21

Updated: 2024-11-21

Summary

The get_query() function of the Ni WooCommerce Custom Order Status WordPress plugin before 1.9.7, used by the niwoocos_ajax AJAX action, available to all authenticated users, does not properly sanitise the sort parameter before using it in a SQL statement, leading to an SQL injection, exploitable by any authenticated users, such as subscriber

Vulnerable Configurations

Part	Description	Count
Application	Ni_Woocommerce_Custom_Order_Status_Project NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status - NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.0 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.1 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.2 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.3 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.3.1 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.3.2 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.3.3 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.3.4 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.3.5 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.4 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.5 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.6 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.7 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.7.1 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.7.2 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.7.3 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.7.4 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.7.5 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.7.6 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.7.7 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.7.8 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.7.9 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.8.0 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.8.1 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.8.2 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.8.3 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.8.4 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.8.5 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.8.6 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.8.7 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.8.8 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.8.9 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.9.0 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.9.1 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.9.2 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.9.3 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.9.4 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.9.5 NI Woocommerce Custom Order Status Project NI Woocommerce Custom Order Status 1.9.6	40

Summary

Vulnerable Configurations

References