WordPress HUSKY Plugin Security Update Advisory (CVE-2024-6457)
Overview
WordPress has released an update to address a vulnerability in their product. Users of affected versions are advised to update to the latest version.
Affected Products
HUSKY – Products Filter Professional for WooCommerce version: ~ 1.3.6 (inclusive)
Resolved Vulnerabilities
Vulnerable to time-based SQL injection via ‘woof_author’ parameter, which could allow an unauthenticated attacker to append additional SQL queries to an existing query to extract sensitive information from the database (CVE-2024-6457)
Vulnerability Patches
Vulnerability patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
HUSKY – Products Filter Professional for WooCommerce version: 1.3.6.1
Referenced Sites
[1] CVE-2024-6457 Detail
https://nvd.nist.gov/vuln/detail/CVE-2024-6457
[2] Wordfence INTELLIGENCE