Unrated severityNVD Advisory· Published May 8, 2023· Updated Jan 31, 2025
Bitcoin / AltCoin Payment Gateway <= 1.7.1 - Unauthenticated SQLi
CVE-2022-4118
Description
The Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop WordPress plugin through 1.7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by authenticated users
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/2839ff82-7d37-4392-8fa3-d490680d42c4mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.