TicketBAI Facturas para WooCommerce vulnerabilities

2 known vulnerabilities in TicketBAI Facturas para WooCommerce from Facturaone. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  TicketBAI Facturas para WooCommerce: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-24767Jun 9, 2025Facturaone

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in facturaone TicketBAI Facturas para WooCommerce wp-ticketbai allows Blind SQL Injection.This issue affects TicketBAI Facturas para WooCommerce: from n/a throug

• 9.8 Critical severity

  TicketBAI Facturas para WooCommerce: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-4564May 15, 2025FacturaoneEPSS 1.22%

  The TicketBAI Facturas para WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation via the 'delpdf' action in all versions up to, and including, 3.18. This makes it possible for unauthenticated attack