CVE-2022-3481

CVE-2022-3481: WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi

Vendor Unknown
Product WooCommerce Dropshipping
Published November 7, 2022
Last update May 1, 2025

CVSS base score

What the vulnerability does

01Description

The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injection

Key dates

02Disclosure timeline

November 7, 2022 CVE published
May 1, 2025 Record updated