Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-24767 EUVD-2025-17479GHSA-5ch5-84x7-c2h3

WordPress TicketBAI Facturas para WooCommerce plugin <= 3.19 - SQL Injection Vulnerability

Published Jun 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in facturaone TicketBAI Facturas para WooCommerce wp-ticketbai allows Blind SQL Injection.This issue affects TicketBAI Facturas para WooCommerce: from n/a through <= 3.19.

Affected products

VendorProductAffectedFixed
facturaone TicketBAI Facturas para WooCommerce ≤ 3.19 —

References