8.5
High
CVE-2025-22639 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Techspawn Distance…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Techspawn Distance Rate Shipping for WooCommerce distance-rate-shipping-for-woocommerce-pro allows Blind SQL Injection.This issue affects Distance Rate Shipping for WooCommerce: from n/a through <= 1.3.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Distance Rate Shipping for WooCommerce 1.3 | earliest → 1.3.4 | No fix stated |
| Distance Rate Shipping for WooCommerce 1.3 | earliest → 1.3.4 | No fix stated |