High · 7.6 CVE-2024-32087 EUVD-2024-29909GHSA-v38h-vr3h-38m7

WordPress Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More plugin <= 3.5.7 - Auth. SQL Injection (SQLi) vulnerability

Published Apr 15, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ExportFeed.com Product: Product Feed on WooCommerce for Google Category: Web / CMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExportFeed.Com Product Feed on WooCommerce for Google.This issue affects Product Feed on WooCommerce for Google: from n/a through 3.5.7.

Affected products

Vendor	Product	Affected	Fixed
ExportFeed.com	Product Feed on WooCommerce for Google	≤ 3.5.7	—

References

https://patchstack.com/database/vulnerability/purple-xmls-google-product-feed-for-woocommerce/wordpress-product-feed-on-woocommerce-for-google-awin-shareasale-bing-and-more-plugin-3-5-7-auth-sql-injection-sqli-vulnerability?_s_id=cve vdb-entry