7.6
High
CVE-2025-47538 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdever Cart…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdever Cart tracking for WooCommerce cart-tracking-for-woocommerce allows SQL Injection.This issue affects Cart tracking for WooCommerce: from n/a through <= 1.0.17.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cart tracking for WooCommerce 1.0 | earliest → 1.0.17 | No fix stated |