Threats tagged 'ghsa-cm75-3jj2-f2gr'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2026-120558The Advanced Shipment Tracking for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the High7.22026-11-03GCVE DatabaseCVE-2026-120558 The Advanced Shipment Tracking for WooCommerce plugin for WordPress contains an SQL Injection vulnerability in the tracking_provider parameter of a REST endpoint. This affects all versions up to and including 3.9. Authenticated users with Shop Manager-level access or higher can exploit this flaw to execute arbitrary SQL queries, potentially extracting sensitive database information. Report on CVE-2026-120558 Vulnerability CWE-89 #ghsa-cm75-3jj2-f2gr	GCVE Database	2026-11-03

Page 1 of 1