CVE-2015-2562: Web-Dorado Ecommerce Wd

High severity, CVSS 7.5. EPSS: 38.7% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) search_category_id, (2) sort_order, or (3) filter_manufacturer_ids in a displayproducts action to index.php.

Affected products

• Web-Dorado Ecommerce Wd: version 1.2.5 only

Published 2015-03-20. Last modified 2026-06-17.