Category - API Security Blog

Automattic: Woocommerce SQL Injection in WC_Report_Coupon_Usage

A SQL injection vulnerability was found in the WooCommerce plugin version 9.9.3. The vulnerable parameter was 'coupon_codes' in the '/wp-admin/admin.php?page=wc-reports&tab=orde ...

August 12, 2025

CVE-2025-42934

creation_timestamp| type| source ---|---|--- 2025-08-12 02:43:09+00:00| seen|...Read More ...

August 12, 2025

CVE-2025-42936

creation_timestamp| type| source ---|---|--- 2025-08-12 02:43:09+00:00| seen|...Read More ...

August 12, 2025

CVE-2025-42955

creation_timestamp| type| source ---|---|--- 2025-08-12 02:43:09+00:00| seen|...Read More ...

August 12, 2025

CVE-2025-42935

creation_timestamp| type| source ---|---|--- 2025-08-12 02:43:09+00:00| seen|...Read More ...

August 12, 2025

CVE-2025-42942

creation_timestamp| type| source ---|---|--- 2025-08-12 02:43:09+00:00| seen|...Read More ...

August 12, 2025

CVE-2025-42975

creation_timestamp| type| source ---|---|--- 2025-08-12 02:43:09+00:00| seen|...Read More ...

August 12, 2025

CVE-2025-42949

creation_timestamp| type| source ---|---|--- 2025-08-12 02:43:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115013490316314202 2025-08-12 03:52:30+00:00| seen|...Read More ...

August 12, 2025