Unrated severityNVD Advisory· Published Jan 2, 2023· Updated Apr 10, 2025
Visual Email Designer for WooCommerce < 1.7.2 - Multiple Author+ SQLi
CVE-2022-3860
Description
The Visual Email Designer for WooCommerce WordPress plugin before 1.7.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as author.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <1.7.2
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/d99ce21f-fbb6-429c-aa3b-19c4a5eb7557mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.