Skip to content

Known CVE

WordPress TI WooCommerce Wishlist Plugin <= 2.8.2 - SQL Injection

In the latest version (2.8.2 as of writing the article) and below, the plugin is vulnerable to a SQL injection vulnerability that allows any users to execute arbitrary SQL queries in the database of the WordPress site. No privileges are required to exploit the issue. The vulnerability is unpatched on the latest version and is tracked as the CVE-2024-43917.

CVE-2024-43917

Critical2024CVSS 9.8CWE-89

time-based-sqli · cve2024 · wp · wordpress · ti-woocommerce-wishlist · wp-plugin · sqli · vkev

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website