CVE-2024-43917

CRITICAL 9.8CVE-2024-43917 · Published 29/08/2024 · updated 17/06/2026

Package	Affected versions	Patched versions
ti woocommerce wishlist templateinvaders	`≤ 2.8.2`	No fix yet

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injection.This issue affects TI WooCommerce Wishlist: from n/a through 2.8.2.

References

patchstack.com/database/vulnerability/ti-woocommerce-wishlist/wordpress-ti-woocommerce-wishlist-plugin-2-8-2-sql-injection-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free