High severity8.5NVD Advisory· Published Aug 29, 2024· Updated Jun 17, 2026

CVE-2024-43942

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wpsoul Greenshift Query and Meta Addon allows SQL Injection.This issue affects Greenshift Query and Meta Addon: from n/a before 3.9.2.

Affected products

Wpsoul/Greenshift Query Addon
cpe:2.3:a:wpsoul:greenshift_query_addon:*:*:*:*:*:wordpress:*:*
Range: <3.9.2
WordPress/Greenshift Query and Meta Addonllm-create
Range: <3.9.2
Wpsoul/Greenshift Query and Meta Addoncpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/greenshiftquery/wordpress-greenshift-query-and-meta-addon-plugin-3-9-2-subscriber-sql-injection-vulnerabilitynvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.552
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000