CVE-2024-43918

WordPress WBW Product Table PRO plugin <= 1.9.4 - Unauthenticated Arbitrary SQL Query Execution vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4.

Affected

WBW · WBW Product Table PRO

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 PATCHSTACK

10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

1.47% chance of exploitation in the next 30 days, 73rd percentile

Published

2024-08-29

Updated

2026-04-28

Proof-of-concept exploits (1)

• KTN1990/CVE-2024-439183★ · 2024-09-24

Security advisories

• https://patchstack.com/database/vulnerability/woo-producttables-pro/wordpress-wbw-product…

References

• CVE Record
• NVD entry

Related

• CVE-2019-10869
• CVE-2019-12815
• CVE-2019-9978
• CVE-2022-0316
• CVE-2024-13513
• CVE-2024-31351