cleantalk
Vulnerabilities and Security Researches

GG Bought Together for WooCommerce, CVE-2025-23967

CVE, Research URL

CVE-2025-23967

Home page URL

Security reports for GG Bought Together for WooCommerce

Application

GG Bought Together for WooCommerce

Published on
Jun 27, 2025
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpopal GG Bought Together for WooCommerce allows SQL Injection. This issue affects GG Bought Together for WooCommerce: from n/a through 1.0.2.
Affected versions
Min -, max 1.0.2.
Status
vulnerable
Previous vulnerability researches
Recipe Card Blocks for Gutenberg & Elementor – Best WordPress Recipe Plugin (CVE-2024-43293) , Aug 20, 2024
Recipe Card Blocks for Gutenberg & Elementor – Best WordPress Recipe Plugin (CVE-2021-24632) , Jun 06, 2024
Recipe Card Blocks for Gutenberg & Elementor – Best WordPress Recipe Plugin (CVE-2021-24634) , Jun 06, 2024
Recipe Card Blocks for Gutenberg & Elementor – Best WordPress Recipe Plugin (CVE-2025-26983) , Feb 27, 2025
New vulnerability
DirectIQ Email Marketing (CVE-2025-52829) , Jun 28, 2025
e.nigma buttons (CVE-2025-5535) , Jun 28, 2025
Evangelische Termine (CVE-2025-28960) , Jun 28, 2025
GG Bought Together for WooCommerce (CVE-2025-23967) , Jun 28, 2025
FormLift for Infusionsoft Web Forms (CVE-2025-47654) , Jun 28, 2025