Search vulnerabilities

Results 4

Export CSV
CVE-2022-3481

WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi

The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injection

CVSS 3.1 · 9.8 Critical EPSS 5.3% KEV · Not listed
Vendors
CVE-2024-35748

WordPress WooCommerce Dropshipping plugin <= 5.0.4 - Unauthenticated Arbitrary Email Sending vulnerability

Missing Authorization vulnerability in OPMC WooCommerce Dropshipping.This issue affects WooCommerce Dropshipping: from n/a through 5.0.4.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors