Vulnerabilities and security researches foremail-customizer-woocommerce email-customizer-woocommerce

Jun 07, 2024

CVE, Research URL: CVE-2022-3860
Home page URL: Security reports for Visual Email Designer for WooCommerce
Application: Visual Email Designer for WooCommerce
Date: Jan 03, 2023
Research Description: The Visual Email Designer for WooCommerce WordPress plugin before 1.7.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as author.
Affected versions: max 1.7.2.
Status: vulnerable