CVE-2023-52215
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 8, 2024
Updated: Feb 2, 2024
CWE ID 89
Summary
CVE-2023-52215 is an SQL injection vulnerability affecting Simple Inventory Management for WooCommerce, versions 1.5.1 and below. Hackers can exploit this weakness by neutralizing special elements in SQL commands, potentially gaining unauthorized access to sensitive data or performing unintended actions on the database. This issue poses a significant threat to websites using this plugin, necessitating immediate patching to protect against potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share