Nabaraj Chapagain NC Wishlist for WooCommerce SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in the NC Wishlist for WooCommerce plugin, affecting versions through 1.0.1. This vulnerability allows attackers to improperly manipulate SQL commands, potentially leading to unauthorized database access or data manipulation.
Impact
Exploitation of this vulnerability allows for direct interaction with the database, which could include stealing information or manipulating database contents.
Remediation
Users are advised to update to a version of the NC Wishlist for WooCommerce plugin that is later than 1.0.1. For those using WordPress, Patchstack offers a virtual patch that can be applied immediately to mitigate this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.