4.1
Medium
CVE-2024-12109 The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.9 does not sanitize and escape a…
Description
The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Product Labels For Woocommerce (Sale Badges) 1.5 | earliest → < 1.5.9 | 1.5.9 |