CVE Catalog
CVE-2016-4905
CriticalSummary
WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 contain an SQL injection vulnerability. Attackers with administrator rights can execute arbitrary SQL commands via unspecified vectors.
Risk Assessment
This vulnerability may lead to unauthorized access to the database and data manipulation, posing a serious threat to the organization's security.
Recommendation
It is recommended to update WP-OliveCart to version 3.1.3 or later and WP-OliveCartPro to version 3.1.8 or later to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with administrator rights to execute arbitrary SQL commands via unspecified vectors.