Description
SQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/72622
Product x_refsource_confirm
http://wordpress.org/extend/plugins/wp-e-commerce/changelog/
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/47627
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/51637
Scores
EPSS
0.0211
EPSS Percentile
79.9%
Details
CWE
CWE-89
Status
published
Products (33)
getshopped/wp_e-commerce
3.6.5
getshopped/wp_e-commerce
3.6.6
getshopped/wp_e-commerce
3.6.7
getshopped/wp_e-commerce
3.6.8
getshopped/wp_e-commerce
3.6.9
getshopped/wp_e-commerce
3.6.10
getshopped/wp_e-commerce
3.6.11
getshopped/wp_e-commerce
3.6.12
getshopped/wp_e-commerce
3.6.13
getshopped/wp_e-commerce
3.7 (3 CPE variants)
... and 23 more
Published
Oct 08, 2012
Tracked Since
Feb 18, 2026