未評価
WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection
CVE-2023-26525
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy.This issue affects Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy: from n/a through 3.7.12.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory patchstack.com
- web wordpress.org