CVE Database
/

CVE-2021-25068

Back to search

CVE-2021-25068

Published: Mar 28, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

The Sync WooCommerce Product feed to Google Shopping WordPress plugin through 1.2.4 uses the 'feed_id' POST parameter which is not properly sanitized for use in a SQL statement, leading to a SQL injection vulnerability in the admin dashboard

VendorProductVersions

Unknown

Sync WooCommerce Product feed to Google Shopping

affected
1.2.4 - <= 1.2.4

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now