exploitDog

CVE-2025-47538

Опубликовано: 07 мая 2025

Источник: nvd

CVSS3: 7.6

CVSS3: 7.2

EPSS Низкий

Описание

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdever Cart tracking for WooCommerce allows SQL Injection. This issue affects Cart tracking for WooCommerce: from n/a through 1.0.17.

Ссылки

https://patchstack.com/database/wordpress/plugin/cart-tracking-for-woocommerce/vulnerability/wordpress-cart-tracking-for-woocommerce-1-0-17-sql-injection-vulnerability?_s_id=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wpdever:cart_tracking_for_woocommerce:*:*:*:*:*:wordpress:*:*

Версия до 1.0.17 (включая)

EPSS

Процентиль: 18%

0.00056

Низкий

7.6 High

CVSS3

7.2 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-gxxw-w6f5-mwh6

CVSS3: 7.6

github

9 месяцев назад

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdever Cart tracking for WooCommerce allows SQL Injection. This issue affects Cart tracking for WooCommerce: from n/a through 1.0.17.

EPSS

Процентиль: 18%

0.00056

Низкий

7.6 High

CVSS3

7.2 High

CVSS3

Дефекты

CWE-89