CVE-2025-22505

Published Jan 9, 2025

Last updated 7 days ago

Overview

Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crispweb NC Wishlist for Woocommerce nc-wishlist-for-woocommerce allows SQL Injection.This issue affects NC Wishlist for Woocommerce: from n/a through <= 1.0.1.
Source
audit@patchstack.com
NVD status
Awaiting Analysis

Weaknesses

audit@patchstack.com
CWE-89

Social media

Hype score
Not currently trending

  1. [CVE-2025-22505: HIGH] "SQL Injection" vulnerability found in Nabaraj Chapagain NC Wishlist for Woocommerce plugin version 1.0.1 and below, allowing attackers to execute malicious SQL commands.#cybersecurity,#vulnerability https://t.co/zU050qlmA3 https://t.co/uScZ2g5Egr

    @CveFindCom

    9 Jan 2025

    32 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2025-22505 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nabaraj Chapagain NC Wishlist for Woocommerce allows SQL Injecti… https://t.co/Ilk5dQhn3j

    @CVEnew

    9 Jan 2025

    257 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.