title: Sync WooCommerce Product feed to Google Shopping <= 1.2.4 - Admin+ SQLi
description: The Sync WooCommerce Product feed to Google Shopping WordPress plugin through 1.2.4 uses the 'feed_id' POST parameter which is not properly sanitized for use in a SQL statement, leading to a SQL injection vulnerability in the admin dashboard
problem types: CWE-89 SQL Injection
affected:
{
product: Sync WooCommerce Product feed to Google Shopping
vendor: Unknown
versions:
lessThanOrEqual: 1.2.4, status: affected, version: 1.2.4, versionType: custom
}