Known CVE

Ubigeo de Peru < 3.6.4 - SQL Injection

The plugin does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections.

CVE-2022-0814

Critical2022CVSS 9.8CWE-89

cve2022 · wordpress · wpscan · wp-plugin · sqli · ubigeo-peru · unauth · ubigeo_de_peru_para_woocommerce_project

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website