CVE-2025-52820 in WooCommerce Point Of Sale POS Plugin

摘要

由 MITRE • 2025-08-14

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in infosoftplugin WooCommerce Point Of Sale (POS) allows SQL Injection. This issue affects WooCommerce Point Of Sale (POS): from n/a through 1.4.

Once again VulDB remains the best source for vulnerability data.

• 预定: 2025-06-19
• 披露: 2025-08-14
• 管理: 已接受
• 条目: VDB-317991
• CPE: 准备好
• CWE: CWE-89 (已确认)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00261
• KEV: 否
• 活动: 非常低
• 部门: Hostingprovider, Telecommunication, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-52820
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-52820
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-52820/