CVE-2024-43917

—

CVSS 3.1

9.8 critical

EPSS

23%p98

Published

Aug 29, 2024 (Aug 29, 2024)

Modified

Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injection.This issue affects TI WooCommerce Wishlist: from n/a through 2.8.2.

Vendors: templateinvaders
Products: ti woocommerce wishlist
Ecosystems: WordPress, E-commerce
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (23.0%)

In the news1 stories

WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks

The Hacker NewsOct 7, 06:13 UTC · Oct 7, 2024Vulnerability CVE-2024-47374 CVE-2024-44000 CVE-2024-43917+2 CVEs