CVE-2023-35915: WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection

Q: What is the severity of CVE-2023-35915?

CVE-2023-35915 is considered a critical severity vulnerability due to its potential for SQL injection attacks.

Q: How do I fix CVE-2023-35915?

To fix CVE-2023-35915, ensure you upgrade Automattic WooPayments to the latest version that addresses the vulnerability.

Q: What systems are affected by CVE-2023-35915?

CVE-2023-35915 affects Automattic WooPayments versions prior to 5.9.1.

Q: What type of vulnerability is CVE-2023-35915?

CVE-2023-35915 is classified as an SQL Injection vulnerability.

Q: What can attackers do with CVE-2023-35915?

Attackers exploiting CVE-2023-35915 could execute arbitrary SQL commands, potentially leading to data compromise.

Published Dec 20, 2023

Updated

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo.This issue affects WooPayments – Fully Integrated Solution Built and Supported by Woo: from n/a through 5.9.0.

Affected Software

1 affected component

Automattic Woopayments Wordpress<5.9.1

Remediation

Information

Update to 5.9.1 or a higher version.

Event History

Dec 20, 2023

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-35915?

CVE-2023-35915 is considered a critical severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2023-35915?

To fix CVE-2023-35915, ensure you upgrade Automattic WooPayments to the latest version that addresses the vulnerability.

What systems are affected by CVE-2023-35915?