Vulnerabilities > Pluginbazaar

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-09	CVE-2022-0948	Unspecified vulnerability in Pluginbazaar Order Listener for Woocommerce The Order Listener for WooCommerce WordPress plugin before 3.2.2 does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection network low complexity pluginbazaar critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.

Vulnerabilities > Pluginbazaar {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Pluginbazaar"}]}

Vulnerabilities > Pluginbazaar