CVE Database /
CVE-2024-47350
CVE · Critical
CVE-2024-47350 — YITH WooCommerce Ajax Search [yith-woocommerce-ajax-search] < 2.8.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-47350
|
YITH WooCommerce Ajax Search [yith-woocommerce-ajax-search] < 2.8.1 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
Critical
9.3
|
< 2.8.1
|
2.8.1 |
2024-09-30 |
—
|
CVE-2024-47350
The YITH WooCommerce Ajax Search plugin through version 2.8.0 contains a SQL injection vulnerability stemming from improper sanitization of user input and inadequately prepared database queries. Unauthenticated attackers can exploit this flaw by injecting malicious SQL code into vulnerable parameters, allowing them to execute arbitrary queries and potentially access confidential data stored in the database. The issue was resolved in version 2.8.1.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings