Description
SQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- ecommerce-unspecified-sql-injection(72622) vdb-entry
- http://wordpress.org/extend/plugins/wp-e-commerce/changelog/
- 47627 third-party-advisory
- 51637 vdb-entry