CVE-2024-43128: WordPress WooCommerce Product Table Lite plugin <= 3.5.1 - Arbitrary Code Execution vulnerability
Published Aug 13, 2024
·Updated
Improper Control of Generation of Code ('Code Injection') vulnerability in WC Product Table WooCommerce Product Table Lite allows Code Injection.This issue affects WooCommerce Product Table Lite: from n/a through 3.5.1.
Affected Software
3 affected components
Wcproducttable Woocommerce Product Table Wordpress<3.8.6
WC Product Table WooCommerce Product Table Lite<=3.5.1
WordPress WooCommerce Product Table Lite<=3.5.1
Remediation
Information
Update to 3.8.6 or a higher version.
Event History
Aug 13, 2024
CVE Published
via MITRE·10:52 AM
Data Sourced
via MITRE·10:52 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-43128?
CVE-2024-43128 has a high severity rating due to its potential for code injection vulnerabilities.
2
How do I fix CVE-2024-43128?
To fix CVE-2024-43128, update the WooCommerce Product Table Lite plugin to the latest version beyond 3.5.1.
3
What software is affected by CVE-2024-43128?
CVE-2024-43128 affects WooCommerce Product Table Lite versions up to and including 3.5.1.
4
What type of vulnerability is CVE-2024-43128?
CVE-2024-43128 is classified as a Code Injection vulnerability.
5
Who is impacted by CVE-2024-43128?
Users and administrators of WooCommerce Product Table Lite up to version 3.5.1 are impacted by CVE-2024-43128.