CVE-2024-56290: WordPress Multiple Shipping And Billing Address For Woocommerce Plugin <= 1.2 - Unauthenticated SQL Injection vulnerability
First published: Tue Jan 07 2025(Updated: )
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce allows SQL Injection.This issue affects Multiple Shipping And Billing Address For Woocommerce: from n/a through 1.2.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WordPress Multiple Shipping And Billing Address For WooCommerce | <=1.2 | |
| SilverPlugins Multiple Shipping And Billing Address For Woocommerce | <=1.2 |
Remedy
Update the WordPress Multiple Shipping And Billing Address For Woocommerce wordpress plugin to the latest available version (at least 1.3).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-56290?
CVE-2024-56290 is considered a high-severity SQL Injection vulnerability affecting the Multiple Shipping And Billing Address For Woocommerce plugin.
How do I fix CVE-2024-56290?
To fix CVE-2024-56290, update the Multiple Shipping And Billing Address For Woocommerce plugin to the latest version available.
Which software versions are affected by CVE-2024-56290?
CVE-2024-56290 affects versions of the Multiple Shipping And Billing Address For Woocommerce plugin up to and including 1.2.
What type of vulnerability is CVE-2024-56290?
CVE-2024-56290 is classified as an SQL Injection vulnerability that allows attackers to manipulate database queries.
What is the potential impact of exploiting CVE-2024-56290?
Exploiting CVE-2024-56290 could allow an attacker to retrieve sensitive data from the database or perform unauthorized actions.
- agent/title
- agent/weakness
- agent/remedy
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/severity
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/silverplugins
- canonical/wordpress multiple shipping and billing address for woocommerce
- vendor/wordpress
- canonical/silverplugins multiple shipping and billing address for woocommerce