blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2022-0783

CRITICAL 9.8 CVSS 3.1
Published
May 2, 2022
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-89
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The Multiple Shipping Address Woocommerce WordPress plugin before 2.0 does not properly sanitise and escape numerous parameters before using them in SQL statements via some AJAX actions available to unauthenticated users, leading to unauthenticated SQL injections

Affected products and versions

  • Unknown Multiple Shipping Address Woocommerce — From 2.0 (including) to 2.0 (excluding)

References

  • wpscan.com https://wpscan.com/vulnerability/4d594424-8048-482d-b61c-45be1e97a8ba Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record