Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2025-23967

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpopal GG Bought Together for WooCommerce allows SQL Injection. This issue affects GG Bought Together for WooCommerce: from n/a through 1.0.2.

  • Published: Jun 27, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-23967
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.3
  • AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

CWEs:

OWASP TOP 10:

No affected software listed.