Threats tagged 'ghsa-vj5w-qq84-5r93'

The Razorpay for WooCommerce WordPress plugin versions before 4.8.9 contain a vulnerability where a value derived from an incoming webhook request is not properly sanitized or escaped before being used in a SQL query. This flaw allows users who can obtain the webhook secret, typically administrators, to perform SQL injection attacks.