High · 8.5 CVE-2025-48118 EUVD-2025-18537GHSA-8c4g-ff46-4q89

WordPress Woocommerce Partial Shipment plugin <= 3.2 - SQL Injection Vulnerability

Published Jun 17, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WpExperts Hub Product: Woocommerce Partial Shipment Category: Web / CMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpExperts Hub Woocommerce Partial Shipment wc-partial-shipment allows SQL Injection.This issue affects Woocommerce Partial Shipment: from n/a through <= 3.2.

Affected products

Vendor	Product	Affected	Fixed
WpExperts Hub	Woocommerce Partial Shipment	≤ 3.2	—

References

https://patchstack.com/database/Wordpress/Plugin/wc-partial-shipment/vulnerability/wordpress-woocommerce-partial-shipment-3-2-sql-injection-vulnerability?_s_id=cve vdb-entry