SQL Injection vulnerability in TI WooCommerce Wishlist

CVE-2024-43917

Summary

A vulnerability exists in the TI WooCommerce Wishlist plugin developed by TemplateInvaders, which allows for SQL Injection attacks. This vulnerability can lead to unauthorized access to the underlying database, potentially compromising sensitive user data. Attackers can exploit this issue by injecting malicious SQL statements through unsanitized input fields within the plugin, enabling them to manipulate database queries. It is crucial for users running versions up to 2.8.2 of the TI WooCommerce Wishlist plugin to review and apply necessary security measures to mitigate the risks associated with this vulnerability.

References