GG Bought Together for WooCommerce, CVE-2025-23967
- CVE, Research URL
- Home page URL
- Application
- Published on
- Jun 27, 2025
- Research Description
- Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpopal GG Bought Together for WooCommerce allows SQL Injection. This issue affects GG Bought Together for WooCommerce: from n/a through 1.0.2.
- Affected versions
-
Min -, max 1.0.2.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| WP Admin UI Customize (CVE-2024-53278) , Nov 28, 2024 |
| WP Admin UI Customize (CVE-2022-3824) , Jun 07, 2024 |