Lucene search

CVE-2024-6457

🗓️ 16 Jul 2024 11:10:15Reported by WordfenceType

The HUSKY – Products Filter Professional for WooCommerce plugin is vulnerable to time-based SQL Injection via the 'woof_author' parameter due to insufficient escaping and lack of query preparation

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2024-6457 HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection	16 Jul 202411:00	–	cvelist
Vulnrichment	CVE-2024-6457 HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection	16 Jul 202411:00	–	vulnrichment
Patchstack	WordPress HUSKY Plugin <= 1.3.6 is vulnerable to SQL Injection	16 Jul 202400:00	–	patchstack
NVD	CVE-2024-6457	16 Jul 202411:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 15, 2024 to July 21, 2024)	25 Jul 202414:49	–	wordfence

Nvd

Vulners

Vulnrichment

Node

pluginus husky_-_products_filter_professional_for_woocommerceRange<1.3.6.1wordpress

[
  {
    "vendor": "realmag777",
    "product": "HUSKY – Products Filter Professional for WooCommerce",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.3.6",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/ecfdf7b1-9bb8-4c1d-a00a-ca1e44440cab
plugins	www.plugins.trac.wordpress.org/changeset/3116888/
plugins	www.plugins.trac.wordpress.org/browser/woocommerce-products-filter/trunk/ext/by_author/index.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Jul 2024 11:15Current

9.7High risk

Vulners AI Score9.7

CVSS37.5 - 9.8

EPSS0.00792

SSVC

CWE-89