Skip to content
OpenAdvisories
Critical · 9.3 CVE-2024-43132 EUVD-2024-40059GHSA-j42w-vpmm-467m

WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated SQL Injection vulnerability

Published Aug 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPWeb Elite Docket (WooCommerce Collections / Wishlist / Watchlist) allows SQL Injection.This issue affects Docket (WooCommerce Collections / Wishlist / Watchlist): from n/a before 1.7.0.

Affected products

VendorProductAffectedFixed
WPWeb Elite Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 1.7.0

References