CVE-2023-35879

Summary

CVE-2023-35879 is a vulnerability affecting WooCommerce Product Vendors, specifically versions from n/a to 2.1.78. An SQL Injection issue is present, which stems from the improper neutralization of special elements used in SQL commands. This flaw enables attackers to inject malicious SQL statements, potentially compromising data integrity and confidentiality.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.