title: WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi
description: The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injection
problem types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
affected:
{
vendor: Unknown
product: WooCommerce Dropshipping
versions:
status: affected, versionType: custom, version: 0, lessThan: 4.4
defaultStatus: unaffected
}