CVE-2024-43941: WordPress Propovoice Pro plugin <= 1.7.0.3 - Unauthenticated SQL Injection vulnerability
Published Aug 29, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Propovoice Propovoice Pro allows SQL Injection.This issue affects Propovoice Pro: from n/a through 1.7.0.3.
Affected Software
1 affected component
Propovoice Propovoice Wordpress<=1.7.0.3
Event History
Aug 29, 2024
CVE Published
via MITRE·03:09 PM
Data Sourced
via MITRE·03:09 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43941?
CVE-2024-43941 has a high severity due to its potential for SQL Injection attacks.
2
How do I fix CVE-2024-43941?
To fix CVE-2024-43941, update Propovoice Pro to the latest version beyond 1.7.0.3.
3
What systems are affected by CVE-2024-43941?
CVE-2024-43941 affects versions of Propovoice Pro from an unknown release up to and including version 1.7.0.3.
4
What type of vulnerability is CVE-2024-43941?
CVE-2024-43941 is an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands.
5
Can CVE-2024-43941 be exploited remotely?
Yes, CVE-2024-43941 can be exploited remotely if proper security measures are not in place.