CVE-2025-26875 in Multiple Shipping and Billing Address for Woocommerce Plugin

Resumen

por MITRE • 2025-03-16

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce allows SQL Injection. This issue affects Multiple Shipping And Billing Address For Woocommerce: from n/a through 1.3.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: Patchstack
• Reservar: 2025-02-17
• Divulgación: 2025-03-16
• Moderación: aceptado
• Artículo: VDB-299828
• CPE: listo
• CWE: CWE-89 (confirmado)
• CVSS: 9.3 (CNA)
• EPSS: 0.00361
• KEV: no
• Actividades: muy bajo
• Sector: Telecommunication, Hostingprovider, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-26875
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-26875
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-26875/