7.6
Élevée
CVE-2023-35915 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo.This issue affects WooPayments – Fully Integrated Solution Built and Supported by Woo: from n/a through 5.9.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WooPayments – Fully Integrated Solution Built and Supported by Woo 5.9 | premières → 5.9.0 | Pas de correctif indiqué |
Autres CVE de WooPayments – Fully Integrated Solution Built and Supported by Woo
Les 4 CVE de WooPayments – Fully Integrated Solution Built and Supported by Woo →
CVE-2023-51503
Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution…
5.9
Moyenne
CVE-2023-35916
Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution…
7.5
Élevée
CVE-2023-49828
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic…
6.5
Moyenne