Skip to content
Sign in
7.6 High

CVE-2023-35879 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This issue affects Product Vendors: from n/a through 2.1.78.

Affected products and versions

Product Affected versions Fixed in
Product Vendors 2.1 earliest → 2.1.78 No fix stated
WooCommerce Product Vendors 2.1 earliest → 2.1.78 No fix stated

Other CVEs of Product Vendors

The 3 CVEs of Product Vendors →
CVE-2017-20193 The Product Vendors is vulnerable to Reflected Cross-Site Scripting via the 'vendor_description' parameter in versions… 4.7 Medium CVE-2023-33331 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce… 8.5 High
Track this CVE