- Description
- Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce allows Blind SQL Injection.This issue affects Smart Manager: from n/a through <= 8.52.0.
- Source
- audit@patchstack.com
- NVD status
- Deferred
CVSS 3.1
- Type
- Secondary
- Base score
- 7.6
- Impact score
- 4.7
- Exploitability score
- 2.3
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
- Severity
- HIGH
- audit@patchstack.com
- CWE-89
- Hype score
- Not currently trending
#exploit 1. CVE-2025-0107: Palo Alto Expedition Tool OS Command Injection - https://t.co/zjTJG9qfQb 2. CVE-2025-22710: WP WooCommerce SQLI - https://t.co/rNTF9xwiwu 3. CVE-2025-23013: Yubico PAM Module Authentication Bypass in Certain Configurations - https://t.co/oqrWCTXihb
@ksg93rd
21 Jan 2025
192 Impressions
0 Retweets
2 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-22710 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StoreApps Smart Manager allows Blind SQL Injection. This issue a… https://t.co/2zgZKBceMd
@CVEnew
21 Jan 2025
296 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes