CVE-2025-32119: WordPress CardGate Payments for WooCommerce plugin <= 3.2.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CardGate CardGate Payments for WooCommerce cardgate allows Blind SQL Injection.This issue affects CardGate Payments for WooCommerce: from n/a through <= 3.2.1.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32119?
The severity of CVE-2025-32119 is classified as critical due to its potential for blind SQL injection attacks.
How do I fix CVE-2025-32119?
To fix CVE-2025-32119, update the CardGate Payments for WooCommerce plugin to version 3.2.2 or later.
Which versions of CardGate Payments for WooCommerce are affected by CVE-2025-32119?
All versions of CardGate Payments for WooCommerce from n/a through 3.2.1 are affected by CVE-2025-32119.
What is the impact of CVE-2025-32119 on WordPress sites?
CVE-2025-32119 allows attackers to perform blind SQL injection, potentially compromising the database on vulnerable WordPress sites.
Can CVE-2025-32119 be exploited remotely?
Yes, CVE-2025-32119 can be exploited remotely without authentication, making it particularly dangerous.