← Back

Product Feed On Woocommerce

product_feed_on_woocommerce

Vendor: Dpl • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24511
1Dpl
1Product Feed On Woocommerce
Jun 17, 2026
Sep 20, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
The fetch_product_ajax functionality in the Product Feed on WooCommerce WordPress plugin before 3.3.1.0 uses a `product_id` POST parameter which is not properly sanitised, escaped or validated before inserting to a SQL s...Show more
The fetch_product_ajax functionality in the Product Feed on WooCommerce WordPress plugin before 3.3.1.0 uses a `product_id` POST parameter which is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.Show less