WordPress security by component

get_query() function of the Ni WooCommerce Custom Order Status

Plugin description

get_query() function of the Ni WooCommerce Custom Order Status is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 21, 2021; the highest CVE/CNA score is 8.8.

Plugin slug: ni-woocommerce-custom-order-status

Latest vulnerability

CVE-2021-24846: get_query() function of the Ni WooCommerce Custom Order Status: SQL injection

get_query() function of the Ni WooCommerce Custom Order Status is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedDec 21, 2021

Safe version guidanceSee mitigation notes

		Safe version
Dec 21, 2021	CVE-2021-24846 get_query() function of the Ni WooCommerce Custom Order Status: SQL injection get_query() function of the Ni WooCommerce Custom Order Status is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE8.8 NVD8.8