Unauthenticated SQL Injection Vulnerability in Themify WooCommerce Product Filter Plugin
CVE-2024-6027
What is CVE-2024-6027?
The article discusses a critical vulnerability, CVE-2024-6027, in the Themify WooCommerce Product Filter plugin for WordPress, allowing for unauthenticated SQL injection attacks. The vulnerability affects all versions up to 1.4.9. The potential impact includes the extraction of sensitive information from the database, and while there are no known exploits or ransomware attacks targeting this vulnerability, it is important for users to update to the latest version to safeguard their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Themify β WooCommerce Product Filter * <= 1.4.9
News Articles
References
CVSS V3.1
Timeline
- π°
First article discovered by Cyber Security Informer
Vulnerability published
Vulnerability Reserved