CVE-2025-24780: WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.4.0 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce allows SQL Injection. This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a through 2.4.0.
Other sources
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows SQL Injection.This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a through <= 2.4.0.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-24780?
CVE-2025-24780 is classified as a critical SQL Injection vulnerability.
How do I fix CVE-2025-24780?
To fix CVE-2025-24780, update the Printcart Web to Print Product Designer for WooCommerce to version 2.4.1 or later.
What are the consequences of exploiting CVE-2025-24780?
Exploiting CVE-2025-24780 can allow an attacker to execute arbitrary SQL commands on the database.
Which versions are affected by CVE-2025-24780?
CVE-2025-24780 affects Printcart Web to Print Product Designer for WooCommerce versions up to and including 2.4.0.
Is CVE-2025-24780 specific to a certain platform?
CVE-2025-24780 specifically affects the Printcart Web to Print Product Designer plugin for WooCommerce.