WordPress Themify – WooCommerce Product Filter Plugin Security Update Advisory
Overview
An update has been released to address vulnerability in the WordPress Themify – WooCommerce Product Filter plugin. Users of affected versions are advised to update to the latest version.
Affected Products
WordPress Themify – WooCommerce Products version 1.4.9 or below
Resolved Vulnerabilities
Time-based SQL Injection vulnerability via ‘conditions’ parameter in Themify for WordPress – WooCommerce Product Filter plugin (CVE-2024-6027)
Vulnerability Patches
Vulnerability Patches have been made available with the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
WordPress Themify – WooCommerce product version 15.0 or later
Referenced Sites
[1] CVE-2024-6027 Detail
https://nvd.nist.gov/vuln/detail/CVE-2024-6027
[2] WordPress Themify – WooCommerce Product Filter Plugin <= 1.4.9 is vulnerable to SQL Injection