The WooCommerce Analytics report export (the wc-analytics/reports//export REST route and the queued CSV export behind it) passed the caller's report arguments to the report query without validating them against that report's schema, so an orderby value outside the allowed list reached the SQL ORDER BY clause unchanged. A user who can view... Weiterlesen: SQL Injection in WooCommerce Analytics Report Export
Intelligence View
⚡ tsecurity.de Intelligence
SQL Injection in WooCommerce Analytics Report Export
The WooCommerce Analytics report export (the wc-analytics/reports//export REST route and the queued CSV export behind it) passed the caller's report arguments…
Sicherheitslücken (CVE) Vulnerability definition feed 1 Min. Lesezeit TA0001 · T1190 KRITIS / Energie
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
18 Quellen
CVE-2026-79848 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 code injection
17 weitere Quellen
VVulDB Updatesvor 7 Std.CVE-2026-79853 | HPE AOS-10 up to 10.4.1.13/10.7.2.6/10.8.1.1 code injection VVulDB Updatesvor 7 Std.CVE-2026-79869 | HPE AOS-10 up to 10.4.1.13/10.7.2.6/10.8.1.1 code injection VVulDB Updatesvor 7 Std.CVE-2026-79852 | HPE AOS-8/AOS-10 up to 10.8.1.1 code injection VVulDB Updatesvor 7 Std.CVE-2026-79857 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 code injection VVulDB Updatesvor 7 Std.CVE-2026-79862 | HPE AOS-8/AOS-10 up to 10.8.1.1 code injection VVulDB Updatesvor 7 Std.CVE-2026-79871 | HPE AOS-10 up to 10.4.1.13/10.7.2.6/10.8.1.1 code injection
+11
14 Quellen
Critical Unpatched Linux Kernel Vulnerabilities Accidentally Disclosed, Including Two Remote Code Execution Flaws
13 weitere Quellen
CCyber Security Newsvor 2 Std.Linux Kernel Security Flaws Accidentally Exposed, Including Two Critical RCE Bugs LLinux, GNU/Linux, free soft…vor 19 Std.Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List CCyber Security Newsvor 4 Std.Critical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public List VVulDB Updatesvor 8 Std.CVE-2025-68318 | Linux Kernel up to 6.17.7 clk privilege escalation (Nessus ID 298897 / WID-SEC-2025-2868) VVulDB Updatesvor 8 Std.CVE-2025-68319 | Linux Kernel up to 6.17.7 netconsole update_userdata state issue (Nessus ID 298897 / WID-SEC-2025-2868) VVulDB Updatesvor 8 Std.CVE-2025-68311 | Linux Kernel up to 6.12.57/6.17.7 tty uart_port privilege escalation (Nessus ID 298897 / WID-SEC-2025-2868)
+7
13 Quellen
CVE-2026-79850 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 privileges management
12 weitere Quellen
VVulDB Updatesvor 7 Std.CVE-2026-79866 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 privileges management VVulDB Updatesvor 7 Std.CVE-2026-79892 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 privileges management VVulDB Updatesvor 7 Std.CVE-2026-79870 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 privileges management VVulDB Updatesvor 7 Std.CVE-2026-95706 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 privileges management VVulDB Updatesvor 7 Std.CVE-2026-79875 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 privileges management VVulDB Updatesvor 7 Std.CVE-2026-79867 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 privileges management
+6
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4291553/sicherheitsluecken-cve/sql-injection-in-woocommerce-analytics-report-export/