Unrated
WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection
CVE-2023-26525
First seen on SecPulse
Original description The description as published by the source.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy.This issue affects Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy: from n/a through 3.7.12.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory patchstack.com
- web wordpress.org