CVE-2025-22639

Published Feb 18, 2025

Last updated 4 days ago

Overview

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Distance Rate Shipping for WooCommerce allows Blind SQL Injection. This issue affects Distance Rate Shipping for WooCommerce: from n/a through 1.3.4.
Source: audit@patchstack.com
NVD status: Received

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.5
Impact score: 4.7
Exploitability score: 3.1
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Severity: HIGH

Weaknesses

audit@patchstack.com: CWE-89

Hype score: Not currently trending

CVE-2025-22639 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Distance Rate Shipping for WooCommerce allows Blind SQL… https://t.co/8FdwXFViXQ
@CVEnew
18 Feb 2025
31 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

References