PT-2026-4133 · WordPress · Fooevents For Woocommerce
CVE-2025-69045
·
Publicado
2026-01-22
·
Atualizado
2026-01-23
CVSS v3.1
8.5
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
FooEvents for WooCommerce versions through 1.20.4
Description
A flaw exists in FooEvents for WooCommerce that allows for SQL Injection. The issue is due to improper neutralization of special elements within SQL commands. This could potentially allow an attacker to manipulate database queries.
Recommendations
Update FooEvents for WooCommerce to a version later than 1.20.4.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Fooevents For Woocommerce