A critical SQL injection vulnerability in the Product Table and List Builder for WooCommerce Lite plugin allows unauthenticated attackers to extract sensitive database information.

The plugin fails to properly sanitize the search parameter before including it in SQL queries, which allows unauthenticated remote attackers to execute arbitrary SQL commands. This flaw stems from insufficient input escaping and a lack of parameterized queries in the search functionality.

This vulnerability poses a significant risk to data confidentiality, as it enables unauthorized actors to perform blind SQL injection attacks to exfiltrate sensitive information from the WordPress database. With a CVSS score of 7.5, the impact is rated as high, particularly because the attack vector is network-based and requires no authentication. A successful exploit could lead to the exposure of customer records, administrative credentials, or proprietary site data, resulting in severe reputational damage and potential regulatory non-compliance.

Immediate Action: Update the Product Table and List Builder for WooCommerce Lite plugin to the latest version available beyond 4.6.2, as indicated by the vendor.

Proactive Monitoring: Review database query logs for unusual search patterns, particularly queries containing SQL syntax characters or unexpected time-delay functions.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block common SQL injection patterns and restrict access to the vulnerable search endpoint if an immediate update is not feasible.

Public Exploit Available: Unknown

Given the high severity of this unauthenticated SQL injection vulnerability, security teams should prioritize patching immediately. Administrators must verify that the plugin is updated to a version that addresses this flaw to prevent unauthorized data exfiltration. If patching cannot be performed immediately, implement restrictive WAF rules to sanitize incoming traffic until the update is applied.