Yüksek CVSS 8.6
CVE-2026-103307: CVE-2026-103307: SQL enjeksiyonu
Açıklama (NVD)
The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and verifies its payment webhook with a signing secret that is empty by default, allowing unauthenticated attackers to perform SQL injection attacks and to mark arbitrary orders as paid.
Özet bilgiler
- CVSS v3.1
- 8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - EPSS
- %0,35 (yüzdelik 28)
- CWE
- CWE-89
- Yama
- Yok / bilinmiyor