CVE-2022-0783

CRÍTICO 9.8CVE-2022-0783 · Published 02/05/2022 · updated 17/06/2026

En resumen

CVE-2022-0783 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a multiple shipping addresses for woocommerce (themehigh).
Probabilidad de explotación en los próximos 30 días (EPSS): 7.6%, mayor que el 94.6% de las vulnerabilidades.
Solución: actualizar a 2.0.0 o posterior.

Package	Affected versions	Patched versions
multiple shipping addresses for woocommerce themehigh	`< 2.0.0`	`2.0.0`

Description

The Multiple Shipping Address Woocommerce WordPress plugin before 2.0 does not properly sanitise and escape numerous parameters before using them in SQL statements via some AJAX actions available to unauthenticated users, leading to unauthenticated SQL injections

References

wpscan.com/vulnerability/4d594424-8048-482d-b61c-45be1e97a8ba · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free