SQL Injection Vulnerability in Printcart Web to Print Product Designer for WooCommerce
CVE-2025-24780

8.5HIGH

Key Information:

Vendor

WordPress
Status
Printcart Web To Print Product Designer For WooCommerce
Vendor
CVE Published:
4 July 2025

What is CVE-2025-24780?

The Printcart Web to Print Product Designer for WooCommerce is susceptible to a SQL Injection vulnerability that enables attackers to manipulate SQL queries by injecting malicious code. This flaw not only threatens the database integrity but also exposes sensitive information. The vulnerability affects all versions from n/a to 2.4.0, necessitating immediate patches to safeguard web applications using this plugin.

Affected Version(s)

Printcart Web to Print Product Designer for WooCommerce <= 2.4.0

References

https://patchstack.com/database/wordpress/plugin/printcar...
vdb-entry

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

timomangcut (Patchstack Alliance)
.
CVE-2025-24780 : SQL Injection Vulnerability in Printcart Web to Print Product Designer for WooCommerce