Skip to content
OpenAdvisories

Vendor

themifyme

33 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter

    The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to time-based SQL Injection via the ‘conditions’ parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficie…