Description
Improper Neutralization of Special Elements used in an SQL Command (-SQL Injection-) vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.29.0.
CVSS 7.6EPSS 0.28900000000000003%Risque 0.78
Voir la source- Publication
- 2026-05-20 13:16:32
- Versions concernées
- <= 4.29.0
- Type
- Installed app
- Dernière modification
- 2026-07-24 10:10:00
- Vecteur
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L