CVE-2024-43917: WordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerability
Published Aug 29, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injection.This issue affects TI WooCommerce Wishlist: from n/a through 2.8.2.
Affected Software
1 affected component
TemplateInvaders Ti Woocommerce Wishlist Wordpress<=2.8.2
Event History
Aug 29, 2024
CVE Published
via MITRE·02:46 PM
Data Sourced
via MITRE·02:46 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43917?
CVE-2024-43917 has a medium severity due to the potential for SQL injection attacks.
2
How do I fix CVE-2024-43917?
To fix CVE-2024-43917, update the TI WooCommerce Wishlist plugin to version 2.8.3 or later.
3
What software is affected by CVE-2024-43917?
CVE-2024-43917 affects TI WooCommerce Wishlist versions up to and including 2.8.2.
4
What are the potential impacts of CVE-2024-43917?
CVE-2024-43917 could allow attackers to execute arbitrary SQL queries, leading to data exposure or manipulation.
5
Is CVE-2024-43917 a common vulnerability?
While SQL injection vulnerabilities are common, CVE-2024-43917 specifically targets a widely used WordPress plugin, making it notably significant.