CVE-2024-43144: WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability
Published Aug 29, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Cost Calculator Builder allows SQL Injection.This issue affects Cost Calculator Builder: from n/a through 3.2.15.
Affected Software
1 affected component
StylemixThemes Cost Calculator Builder Wordpress<3.2.16
Remediation
Information
Update to 3.2.16 or a higher version.
Event History
Aug 29, 2024
CVE Published
via MITRE·02:45 PM
Data Sourced
via MITRE·02:45 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43144?
CVE-2024-43144 is categorized as a critical SQL Injection vulnerability.
2
How do I fix CVE-2024-43144?
To resolve CVE-2024-43144, upgrade the Cost Calculator Builder plugin to version 3.2.16 or later.
3
Which versions of Cost Calculator Builder are affected by CVE-2024-43144?
CVE-2024-43144 affects Cost Calculator Builder versions from n/a up to 3.2.15.
4
What type of vulnerability is CVE-2024-43144?
CVE-2024-43144 is an SQL Injection vulnerability due to improper neutralization of special elements in SQL commands.
5
Who is impacted by CVE-2024-43144?
Users of StylemixThemes Cost Calculator Builder versions up to 3.2.15 are impacted by CVE-2024-43144.