title: Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
description: The Order Listener for WooCommerce WordPress plugin before 3.2.2 does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection
problem types: CWE-89 SQL Injection
affected:
{
product: Order Listener for WooCommerce – Play Sounds Instantly on New Orders
vendor: Unknown
versions:
lessThan: 3.2.2, status: affected, version: 3.2.2, versionType: custom
}