Skip to content

fix(woocommerce): Resolved SQL injection vulnerability in campaign reward order counting - #34

Open
nur-alam wants to merge 4 commits into
devfrom
security
Open

fix(woocommerce): Resolved SQL injection vulnerability in campaign reward order counting#34
nur-alam wants to merge 4 commits into
devfrom
security

Conversation

@nur-alam

@nur-alam nur-alam commented Aug 31, 2026

Copy link
Copy Markdown
Collaborator

Enhance data sanitization and escaping in user profile and campaign dashboard. Updated various files to improve security by applying proper escaping functions such as esc_html, esc_attr, and esc_url to user data outputs. This ensures that user-generated content is safely displayed, preventing potential XSS vulnerabilities.

…ile and campaign dashboard

Updated various files to improve security by applying proper escaping functions such as esc_html, esc_attr, and esc_url to user data outputs. This ensures that user-generated content is safely displayed, preventing potential XSS vulnerabilities.
Implemented reward meta registration to ensure non-numeric pledge amounts are not stored. Enhanced data sanitization for pledge amounts in the rewards sidebar form and campaign order number data function to enforce integer values, improving data integrity and security.
@nur-alam nur-alam changed the title fix(woocommerce): enhance data sanitization and escaping in user profile and campaign dashboard fix(woocommerce): Resolved SQL injection vulnerability in campaign reward order counting Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant