Monitor free

Report

New Known

Verified

Not fixed

WordPress Homepage Product Organizer for WooCommerce plugin <= 1.1 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities

9.1

CVSS 3.1 score Critical severity

Report

Monitoring Not reported to be exploited

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

Homepage Product Organizer for WooCommerce

Type

Plugin

Vulnerable versions

<= 1.1

Fixed in

N/A

PSID

dba7dc99c693

CVE ID

CVE-2022-30998

Classification

SQL Injection

OWASP Top 10

A1: Injection

Required privilege

Requires subscriber or higher role user authentication.

Credits

Lenon Leite (Patchstack Alliance)

Publicly disclosed

2022-07-19

Patchstack vPatch available since

09.12.2021

Details

Multiple Authenticated SQL Injection (SQLi) vulnerabilities were discovered by Lenon Leite (Patchstack Alliance) in the WordPress Homepage Product Organizer for WooCommerce plugin (versions <= 1.1).

Solution

No patched version is available. We were unable to contact the vendor.

References