Log out
Get PRO

Latest

Input validation vulnerability in Shopper – Affiliate Link Management, 25000+ Brand Partnerships & Creative Product Displays 3.2.5

  • Severity: high-risk
  • Status: Fixed
  • Publication: March 31, 2025

The Shopper plugin for WordPress, up to and including version 3.2.5, has a security issue known as SQL Injection. This happens because the plugin does not properly handle user input and does not prepare the SQL query well enough. This leaves the plugin vulnerable to attacks from unauthorized individuals who can add their own SQL queries to the existing ones, potentially accessing private information from the website’s database.

Detected in:

Shopper – Affiliate Link Management, 25000+ Brand Partnerships & Creative Product Displays fixed vulnerable versions: >= * <= 3.2.5

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.