Threats tagged 'ghsa-2j6p-mqrp-cf4j'

A SQL injection vulnerability exists in the Product Feed Manager For WooCommerce WordPress plugin versions before 7.6.1. The plugin fails to properly sanitize and escape custom filter rules used in SQL queries, allowing users with Contributor role or higher to execute SQL injection attacks. This vulnerability has a high severity score of 8.1 and can lead to unauthorized data disclosure and modification.