CVE-2024-33551: WordPress XStore Core plugin <= 5.3.5 - Unauthenticated SQL Injection vulnerability
Published Apr 29, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore Core allows SQL Injection.This issue affects XStore Core: from n/a through 5.3.5.
Affected Software
3 affected components
8theme Xstore Core Wordpress<5.3.9
8theme XStore Core<=5.3.5
WordPress XStore Core<=5.3.5
Event History
Apr 29, 2024
CVE Published
via MITRE·06:08 AM
Data Sourced
via MITRE·06:08 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-33551?
CVE-2024-33551 is classified as a high severity SQL Injection vulnerability.
2
How do I fix CVE-2024-33551?
To fix CVE-2024-33551, update 8theme XStore Core to version 5.3.6 or later.
3
Which versions of XStore Core are affected by CVE-2024-33551?
CVE-2024-33551 affects all versions of XStore Core up to and including 5.3.5.
4
What type of vulnerability is CVE-2024-33551?
CVE-2024-33551 is an SQL Injection vulnerability due to improper neutralization of special elements in SQL commands.
5
Who is the vendor for the product affected by CVE-2024-33551?
The vendor for the affected product is 8theme.