Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-4118 EUVD-2022-51485GHSA-qrhc-83j2-vphf

Bitcoin / AltCoin Payment Gateway <= 1.7.1 - Unauthenticated SQLi

Published May 8, 2023 · Updated Jan 31, 2025 · Assigned by WPScan

Category: Web / CMS

Description

The Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop WordPress plugin through 1.7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by authenticated users

Affected products

VendorProductAffectedFixed
— Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop ≤ 1.7.1 —

References