Advanced Shipment Tracking for WooCommerce SQL injection flaw
Sensitive store data can be stolen through this shipping plugin.
Summary
Input to the plugin's REST endpoint is concatenated into a database query, so an authenticated attacker can append extra queries. The attacker can then extract sensitive information from the database. Versions up to and including 3.9 are affected.
Affected when
- Attacker holds a logged-in account with Shop Manager-level access or higher
- Plugin version 3.9 or older
What to do
No fixed version is named in the sources. Check that the plugin runs a version newer than 3.9 and read the vendor's advisory.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen