CVE-2021-24846
The get_query() function of the Ni WooCommerce Custom Order Status WordPress plugin before 1.9.7, used by the niwoocos_ajax AJAX action, available to all authenticated users, does not properly sanitise the sort parameter before using it in a SQL statement, leading to an SQL injection, exploitable by any authenticated users, such as subscriber
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - contact@wpscan.com
- Published
- 2021-12-21
- Last modified
- 2024-08-03
- Weaknesses
- CWE-89
Affected products
- Ni Woocommerce Custom Order Status (Ni Woocommerce Custom Order Status Project)
- Ni Woocommerce Custom Order Status (Unknown)
References
- https://wpscan.com/vulnerability/a1e7cd2b-8400-4c5d-8b47-a8ccd1e21675
