CVE-2024-13234

The Product Table by WBW plugin for WordPress is vulnerable to SQL Injection via the 'additionalCondition' parameter in all versions up to, and including, 2.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2024-13234

creationtimestamp| type| source ---|---|--- 2025-01-23 11:14:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113877374722127246 2025-01-23 11:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfqxkklc62j 2025-01-23 11:39:47+00:00| seen|...

CVE-2024-13234 Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection

The Product Table by WBW plugin for WordPress is vulnerable to SQL Injection via the 'additionalCondition' parameter in all versions up to, and including, 2.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2024-13234

The CVE-2024-13234 in WordPress Plugin: Product Table by WBW is an unauthenticated SQL Injection via the additionalCondition parameter in all versions up to 2.1.2. Public sources confirm this vulnerability and note a patch exists in later versions, but the exact fixed version is not specified in ...

CVE-2024-13234 Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection

The Product Table by WBW plugin for WordPress is vulnerable to SQL Injection via the 'additionalCondition' parameter in all versions up to, and including, 2.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...