CVE-2022-3481

CVE-2022-3481: WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi

Vendor Unknown
Product WooCommerce Dropshipping
Published November 7, 2022
Last update May 1, 2025

CVSS base score

—

What the vulnerability does

01Description

The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injection

Key dates

02Disclosure timeline

November 7, 2022 CVE published
May 1, 2025 Record updated