PT-2025-15964
CVE-2025-32687
·
Published
2025-04-09
·
Updated
2025-04-10
Description by
CVSS 3.1
8.5
HighMetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions:
Magnigenie Review Stars Count For WooCommerce versions prior to 2.0
Description:
The issue is related to improper neutralization of special elements used in an SQL command, which allows SQL injection. This problem can potentially be exploited to inject malicious SQL code.
Recommendations:
For versions prior to 2.0, update to version 2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive database elements to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾