CVE-2022-4118

Published: 2023-05-08T14:15Z

Last Modified: 2025-01-31T22:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop WordPress plugin through 1.7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by authenticated users > MITRE Terms of Use apply – see LICENSE‑MITRE.txt