Lucene search
PatchstackCVE-2024-43943HistoryAug 29, 2024 - 4:15 p.m.
CVE-2024-43943
2024-08-2916:15:09
CWE-89
Patchstack
web.nvd.nist.gov
22
cve-2024-43943
sql injection
wpsoul greenshift woocommerce addon
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
20.0%
Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Wpsoul Greenshift Woocommerce Addon allows SQL Injection.This issue affects Greenshift Woocommerce Addon: from n/a before 1.9.8.
Affected configurations
Node
wpsoulgreenshift_woocommerce_addonRange<1.9.8wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wpsoul | greenshift_woocommerce_addon | * | cpe:2.3:a:wpsoul:greenshift_woocommerce_addon:*:*:*:*:*:wordpress:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Greenshift Woocommerce Addon",
"vendor": "Wpsoul",
"versions": [
{
"changes": [
{
"at": "1.9.8",
"status": "unaffected"
}
],
"lessThan": "1.9.8",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2024-43943
2024-08-29 16:15:09
cvelist
cvelist
vulnrichment
vulnrichment
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
20.0%
Related for CVE-2024-43943