{"vulnerability": "CVE-2025-47608", "sightings": [{"uuid": "88015b1d-69d6-4003-afbf-a8285ce65b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47608", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "794dda6c-26bd-4efc-a7f2-2d8d8b5536ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47608", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_abandoned_cart_sqli.rb", "content": "", "creation_timestamp": "2021-02-04T17:02:47.000000Z"}, {"uuid": "a465139a-50d4-4326-bd0f-273ecc27b53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47608", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17726", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-47608\n\ud83d\udd25 CVSS Score: 9.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce allows SQL Injection. This issue affects Recover abandoned cart for WooCommerce: from n/a through 2.5.\n\ud83d\udccf Published: 2025-06-09T15:54:07.876Z\n\ud83d\udccf Modified: 2025-06-09T17:23:26.523Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/recover-wc-abandoned-cart/vulnerability/wordpress-recover-abandoned-cart-for-woocommerce-2-5-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-09T18:11:10.000000Z"}, {"uuid": "d67beee9-fe3a-49d9-95de-563abdbe8fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47608", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_abandoned_cart_sqli.rb", "content": "{\"actions\": [{\"description\": \"Queries username, password hash for COUNT users\", \"name\": \"List Users\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die\", \"WPDeeply\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Abandoned Cart, a plugin for WordPress which extends the WooCommerce plugin,\\n          prior to 5.8.2 is affected by an unauthenticated SQL injection via the\\n          billing_first_name parameter of the save_data AJAX call.  A valid\\n          wp_woocommerce_session cookie is required, which has at least one item in the\\n          cart.\", \"disclosure_date\": \"2020-11-05\", \"fullname\": \"auxiliary/scanner/http/wp_abandoned_cart_sqli\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Abandoned Cart for WooCommerce SQLi Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/wp_abandoned_cart_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/wp_abandoned_cart_sqli\", \"references\": [\"CVE-2025-47608\", \"WPVDB-10461\", \"URL-https://wpdeeply.com/woocommerce-abandoned-cart-before-5-8-2-sql-injection/\", \"URL-https://plugins.trac.wordpress.org/changeset/2413885\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:56.316617Z"}]}