Hi, I have the same issue.
Hi, same to me (Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’)).
WordPress TI WooCommerce Wishlist plugin vulnerability. Immediate update is highly recommended. Versions: <= 2.8.2. Type: SQL Injection. More details: the vulnerability allows an attacker to execute arbitrary SQL queries in the database. https://wordpress.org/plugins/ti-woocommerce-wishlist/ , https://patchstack.com/database/vulnerability/ti-woocommerce-wishlist/wordpress-ti-woocommerce-wishlist-plugin-2-8-2-sql-injection-vulnerability . Update the plugin to the latest version: https://wordpress.org/plugins/ti-woocommerce-wishlist/ . File: wp-content/plugins/ti-woocommerce-wishlist/readme.txt.
More details. When are you releasing a fix?
Welp, looks like the dev doesn’t care about fixing this. I’m deleting it.
-
This reply was modified 1 year, 4 months ago by
tamar.
We have updated this plugin to version 2.9.0, which includes fixes for SQL injection vulnerabilities. We strongly recommend updating your setup to the latest version!
