CVE-2022-0814

PoC —

CVSS 3.1

9.8 critical

EPSS

9%p95

Published

May 9, 2022 (May 9, 2022)

Modified

Jun 17, 2026

Description

The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections

Vendors: ubigeo de peru para woocommerce project
Products: ubigeo de peru para woocommerce
Ecosystems: WordPress, E-commerce
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.4%)

In the news0 stories

No ingested article mentions this CVE yet.