7.6
High
CVE-2023-35915 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo.This issue affects WooPayments – Fully Integrated Solution Built and Supported by Woo: from n/a through 5.9.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WooPayments – Fully Integrated Solution Built and Supported by Woo 5.9 | earliest → 5.9.0 | No fix stated |
Other CVEs of WooPayments – Fully Integrated Solution Built and Supported by Woo
The 4 CVEs of WooPayments – Fully Integrated Solution Built and Supported by Woo →
CVE-2023-51503
Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution…
5.9
Medium
CVE-2023-35916
Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution…
7.5
High
CVE-2023-49828
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic…
6.5
Medium