Log out
Get PRO

Latest

Input validation vulnerability in Product Enquiry for WooCommerce 3.0

  • Severity: medium-risk
  • Status: Fixed
  • Publication: November 7, 2023

The Product Enquiry for WooCommerce plugin for WordPress has a security vulnerability that could allow unauthenticated attackers to inject malicious code into pages on the website. This code would then run when any user visits the affected page. This vulnerability affects versions of the plugin up to 3.0 and is caused by the plugin not properly checking and protecting the information it receives. A similar vulnerability has been reported in the past.

Detected in:

Product Enquiry for WooCommerce fixed vulnerable versions: >= * <= 3.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.