Vulnerability · Published Feb 28, 2022 · Assigned by WPScan
CVE-2022-0412TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection
Critical 9.8
In plain English
A critical-severity SQL injection in TI WooCommerce Wishlist from TemplateInvaders. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 74.0% (higher than 99.5% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)74.0%top 0.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Nuclei
Official description
The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the item_id parameter before using it in a SQL statement via the wishlist/remove_product REST endpoint, allowing unauthenticated attackers to perform SQL injection attacks
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TemplateInvaders | TI WooCommerce Wishlist | 1.40.1 – before 1.40.1 |
| TemplateInvaders | TI WooCommerce Wishlist Pro | 1.40.1 – before 1.40.1 |
Weakness: CWE-89
References
- https://wpscan.com/vulnerability/e984ba11-abeb-4ed4-9dad-0bfd539a9682 x_refsource_MISC
- https://plugins.trac.wordpress.org/changeset/2668899 x_refsource_CONFIRM