title: Pricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQLi
description: The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection
problem types: CWE-89 SQL Injection
affected:
{
product: Pricing Deals for WooCommerce
vendor: Unknown
versions:
lessThanOrEqual: 2.0.2.02, status: affected, version: 2.0.2.02, versionType: custom
}