PT-2026-2835 · WordPress · Shipping Rate By Cities
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Shipping Rate By Cities plugin for WordPress versions prior to 2.0.1
Description
The Shipping Rate By Cities plugin for WordPress is susceptible to SQL Injection due to inadequate input validation and query preparation. Specifically, the
city parameter is not properly sanitized, allowing attackers to inject malicious SQL code. This could enable unauthorized access to sensitive database information. The issue affects unauthenticated attackers. The vulnerable parameter is city.Recommendations
Update the Shipping Rate By Cities plugin to version 2.0.1 or later.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Shipping Rate By Cities