Visual Email Designer for WooCommerce, CVE-2022-3860

CVE, Research URL: CVE-2022-3860
Home page URL: Security reports for Visual Email Designer for WooCommerce
Application: Visual Email Designer for WooCommerce
Published on: Jan 03, 2023
Research Description: The Visual Email Designer for WooCommerce WordPress plugin before 1.7.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as author.
Affected versions: max 1.7.2.
Status: vulnerable