CVE-2024-43918

Severity

CRITICAL

CVSS

10.0

EPSS

0.01474

Risk score

40.52

CISA KEV

PoC

Published

2024-08-29

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2024-40568, GHSA-76XQ-3XGG-JFMH

Products

woobewoo:WBW Product Table PRO n/a ≤1.9.4

Sources

euvd EUVD-2024-40568

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-40568
https://patchstack.com/database/vulnerability/woo-producttables-pro/wordpress-wbw-product-table-pro-plugin-1-9-4-unauthenticated-arbitrary-sql-query-execution-vulnerability?_s_id=cve