{"id":"CVE-2024-49244","aliases":["EUVD-2024-43313","GHSA-wqpc-58rm-xq5r"],"status":"published","title":"WordPress SV Product Import Export for WooCommerce plugin \u003c= 1.0.0 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vrinsoft CSV Product Import Export for WooCommerce csv-wc-product-import-export.This issue affects CSV Product Import Export for WooCommerce: from n/a through \u003c= 1.0.0.","severity":{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00395,"percentile":0.34164,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2024-10-17T17:33:11Z","modified":"2026-06-17T07:59:34Z","products":[{"vendor":"cmssoft","product":"csv product import export for woocommerce"},{"vendor":"vrinsoft","product":"csv product import export for woocommerce"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/csv-wc-product-import-export/vulnerability/wordpress-sv-product-import-export-for-woocommerce-plugin-1-0-0-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49244"},{"url":"https://patchstack.com/database/vulnerability/csv-wc-product-import-export/wordpress-sv-product-import-export-for-woocommerce-plugin-1-0-0-sql-injection-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-wqpc-58rm-xq5r"}],"sources":{"cve":[{"id":"CVE-2024-49244","title":"WordPress SV Product Import Export for WooCommerce plugin \u003c= 1.0.0 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vrinsoft CSV Product Import Export for WooCommerce csv-wc-product-import-export.This issue affects CSV Product Import Export for WooCommerce: from n/a through \u003c= 1.0.0.","status":"published","published":"2024-10-17T17:33:11.071Z","modified":"2026-04-29T09:51:53.277Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:33:55.977982Z"}],"euvd":[{"id":"EUVD-2024-43313","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vrinsoft CSV Product Import Export for WooCommerce csv-wc-product-import-export.This issue affects CSV Product Import Export for WooCommerce: from n/a through \u003c= 1.0.0.","status":"published","published":"2024-10-17T17:33:11Z","modified":"2026-04-29T09:51:53Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"updated_at":"2026-11-02T19:05:22.319648Z"}],"ghsa":[{"id":"GHSA-wqpc-58rm-xq5r","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cmssoft CSV Product Import Export for WooCommerce allows SQL Injection.This issue affects CSV Product Import Export for WooCommerce: from n/a through 1.0.0.","status":"published","published":"2024-10-17T18:31:37Z","modified":"2026-04-01T18:32:03Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:06:57.545024Z"}],"nvd":[{"id":"CVE-2024-49244","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vrinsoft CSV Product Import Export for WooCommerce csv-wc-product-import-export.This issue affects CSV Product Import Export for WooCommerce: from n/a through \u003c= 1.0.0.","status":"published","published":"2024-10-17T18:15:11.503Z","modified":"2026-06-17T07:59:34.353Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:10:32.45889Z"}]}}