Potential SQL Injection Vulnerability in Greenshift Woocommerce Addon

CVE-2024-43943

What is CVE-2024-43943?

The Greenshift Woocommerce Addon by Wpsoul is susceptible to an SQL Injection vulnerability allowing attackers to execute arbitrary SQL commands. This flaw arises from improper neutralization of special elements used within SQL commands. If exploited, this could enable unauthorized access to the database, potentially leading to data leakage or manipulation. It is critical for users and administrators to update their installations to version 1.9.8 or later to mitigate the risks associated with this vulnerability.

References