CVE-2024-32087: WordPress Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More plugin <= 3.5.7 - Auth. SQL Injection (SQLi) vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExportFeed.Com Product Feed on WooCommerce for Google.This issue affects Product Feed on WooCommerce for Google: from n/a through 3.5.7.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32087?
CVE-2024-32087 is classified as a high severity SQL Injection vulnerability affecting specific versions of Product Feed on WooCommerce for Google.
How do I fix CVE-2024-32087?
To fix CVE-2024-32087, update the Product Feed on WooCommerce for Google plugin to at least version 3.5.8 or later.
What versions are affected by CVE-2024-32087?
CVE-2024-32087 affects all versions of Product Feed on WooCommerce for Google prior to 3.5.8.
What type of vulnerability is CVE-2024-32087?
CVE-2024-32087 is an SQL Injection vulnerability that allows an attacker to manipulate SQL queries.
Who should be concerned about CVE-2024-32087?
Users of the Product Feed on WooCommerce for Google plugin with versions up to 3.5.7 should be concerned about CVE-2024-32087.