Lucene search
HistoryApr 29, 2024 - 6:15 a.m.
CVE-2024-33559
cve
sql injection
8theme xstore
version 9.3.5
9.3 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
9.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
36.4%
Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in 8theme XStore allows SQL Injection.This issue affects XStore: from n/a through 9.3.5.
Related
cvelist
cvelist
wpvulndb
wpvulndb
XStore < 9.3.9 - Unauthenticated SQLi
2024-05-01 00:00:00
cve
cve
CVE-2024-33559
2024-04-29 06:15:12
zdt
zdt
Wordpress Theme XStore 9.3.8 - SQL injection Vulnerability
2024-05-19 00:00:00
packetstorm
packetstorm
WordPress XStore Theme 9.3.8 SQL Injection
2024-05-20 00:00:00
exploitdb
exploitdb
Wordpress Theme XStore 9.3.8 - SQLi
2024-05-19 00:00:00
wordfence
wordfence
9.3 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
9.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
36.4%
Related for NVD:CVE-2024-33559