Descrição
Improper Neutralization of Special Elements used in an SQL Command (-SQL Injection-) vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.29.0.
CVSS 7.6EPSS 0.28900000000000003%Risco 0.78
Ver fonte- Publicação
- 2026-05-20 13:16:32
- Versões afetadas
- <= 4.29.0
- Tipo
- Installed app
- Última alteração
- 2026-07-24 10:10:00
- Vetor
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L