CVE-2023-40010
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2023-40010 represents a significant SQL Injection vulnerability in the realmag777 HUSKY – Products Filter for WooCommerce Professional. Affecting versions from n/a through 1.3.4.2, this issue arises due to improper neutralization of special elements in SQL commands. The consequence of exploiting this vulnerability can lead to unauthorized access, data manipulation, or even complete system takeover. This flaw poses a serious security risk for WooCommerce Professional users employing the HUSKY – Products Filter plugin and necessitates an immediate patch application.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.