Wp Icommerce

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-24402 HIGH POC This Week

The Orders functionality in the WP iCommerce WordPress plugin through 1.1.1 has an `order_id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi Wp Icommerce

NVD WPScan

CVSS 3.1

7.2

EPSS

4.5%

CVE-2021-24402

EPSS 5% CVSS 7.2

HIGH POC This Week

The Orders functionality in the WP iCommerce WordPress plugin through 1.1.1 has an `order_id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi Wp Icommerce

NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy