CVE-2024-55972

🗓️ 16 Dec 2024 14:31:23Reported by PatchstackType

cve🔗 web.nvd.nist.gov👁 38 Views🌐 WEB

SQL Injection vulnerability in WordPress eTemplates plugin version 0.2.1 and earlier discovered.

Reporter	Title	Published	Views	Family All 11
0day.today	WordPress eTemplates 0.2.1 SQL Injection Vulnerability	2 Jan 202500:00	–	zdt
Circl	CVE-2024-55972	6 Jan 202520:17	–	circl
CNNVD	WordPress plugin eTemplates SQL注入漏洞	16 Dec 202400:00	–	cnnvd
Cvelist	CVE-2024-55972 WordPress eTemplates plugin <= 0.2.1 - SQL Injection vulnerability	16 Dec 202414:31	–	cvelist
EUVD	EUVD-2024-52872	3 Oct 202520:07	–	euvd
NVD	CVE-2024-55972	16 Dec 202415:15	–	nvd
Patchstack	WordPress eTemplates plugin <= 0.2.1 - SQL Injection vulnerability	14 Dec 202419:59	–	patchstack
Positive Technologies	PT-2024-36624 · Unknown · Etemplates	16 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-55972	5 Feb 202500:33	–	redhatcve
Vulnrichment	CVE-2024-55972 WordPress eTemplates plugin <= 0.2.1 - SQL Injection vulnerability	16 Dec 202414:31	–	vulnrichment

Vulners

Node

chriscarvache etemplatesRange≤0.2.1wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "etemplates",
    "product": "eTemplates",
    "vendor": "chriscarvache",
    "versions": [
      {
        "lessThanOrEqual": "0.2.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/Wordpress/Plugin/etemplates/vulnerability/wordpress-etemplates-plugin-0-2-1-sql-injection-vulnerability

Parameter	Position	Path	Description	CWE
id	query param	wp-content/plugins/etemplates/et-popup.php	Unauthenticated SQL Injection in etemplates plugin via id parameter (CVE-2024-55972).	CWE-89

28 Apr 2026 16:10Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.3

EPSS0.10897

SSVC

CWE-89