PT-2026-4133 · WordPress · Fooevents For Woocommerce

Published 2026-01-22 · Updated 2026-01-23 · CVE-2025-69045

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions FooEvents for WooCommerce versions through 1.20.4

Description A flaw exists in FooEvents for WooCommerce that allows for SQL Injection. The issue is due to improper neutralization of special elements within SQL commands. This could potentially allow an attacker to manipulate database queries.

Recommendations Update FooEvents for WooCommerce to a version later than 1.20.4.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-69045

Affected Products

Fooevents For Woocommerce

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-69045 · Security Note
• https://twitter.com/CVEnew/status/2014706950949212520 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/fooevents/vulnerability/wordpress-fooevents-for-woocommerce-plugin-1-20-4-sql-injection-vulnerability?_s_id=cve · Note