Not rated

CVE-2021-25068 The Sync WooCommerce Product feed to Google Shopping WordPress plugin through 1.2.4 uses the 'feed_id' POST parameter…

Description

The Sync WooCommerce Product feed to Google Shopping WordPress plugin through 1.2.4 uses the 'feed_id' POST parameter which is not properly sanitized for use in a SQL statement, leading to a SQL injection vulnerability in the admin dashboard

Affected products and versions

Product	Affected versions	Fixed in
Sync WooCommerce Product feed to Google Shopping	1.2.4	No fix stated

Do you use Sync WooCommerce Product feed to Google Shopping?

Track this CVE Watch Sync WooCommerce Product feed to Google Shopping Check my SBOMs

www.cveye.io/en/cve/CVE-2021-25068

Timeline

Published March 28, 2022
Last modified August 3, 2024

References

wpscan.com wpscan.com

Track this CVE