CVE-2022-0783

9.8 criticalEPSS 7.6%

Critical (9.8) in themehigh multiple shipping addresses for woocommerce. EPSS 7.6% chance of exploitation in the next 30 days.

The Multiple Shipping Address Woocommerce WordPress plugin before 2.0 does not properly sanitise and escape numerous parameters before using them in SQL statements via some AJAX actions available to unauthenticated users, leading to unauthenticated SQL injections

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 7.6% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-05-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

themehigh:multiple_shipping_addresses_for_woocommerce

References

https://wpscan.com/vulnerability/4d594424-8048-482d-b61c-45be1e97a8ba
https://wpscan.com/vulnerability/4d594424-8048-482d-b61c-45be1e97a8ba

Check your stack JSON