CyberRota Analysis
AI-GeneratedThe Price Drop Alert for Woo Commerce WordPress plugin versions up to 1.1 is vulnerable to SQL injection due to inadequate sanitization and escaping of parameters in an AJAX action accessible to unauthenticated users. This flaw enables attackers to execute malicious SQL queries, potentially leading to unauthorized access to sensitive database information. WordPress site administrators using this plugin should prioritize immediate updates to mitigate the risk of data breaches.
Original NVD Description
The Price Drop Alert for Woo Commerce WordPress plugin through 1.1 does not sanitize and escape parameters before using them in a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database.