← WordPress Vulnerabilities
WordPress security by component

Orders functionality in the WP iCommerce

Orders functionality in the WP iCommerce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 20, 2021; the highest CVE/CNA score is 7.2.

Plugin slug: wp-icommerce

CVE-2021-24402: Orders functionality in the WP iCommerce: SQL injection

Orders functionality in the WP iCommerce is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedSep 20, 2021
Safe version guidanceSee mitigation notes
Safe version
Sep 20, 2021 CVE-2021-24402
Orders functionality in the WP iCommerce: SQL injection
Orders functionality in the WP iCommerce is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE7.2
NVD7.2