Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injection.This issue affects TI WooCommerce Wishlist: from n/a through 2.8.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TemplateInvaders | TI WooCommerce Wishlist | ≤ 2.8.2 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
WordPress TI WooCommerce Wishlist SQL Injection (CVE-2024-43917)
auxiliary/scanner/http/wp_ti_woocommerce_wishlist_sqli
GitHub 2 repositories
-
p33d/CVE-2024-43917 ★ 8 · Sep 29, 2024
-
sug4r-wr41th/CVE-2024-43917 ★ 0 · Jun 25, 2025
TI WooCommerce Wishlist (WordPress plugin) <= 2.8.2 CVE-2024-43917 PoC
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WordPress TI WooCommerce Wishlist Plugin <= 2.8.2 - SQL Injection http/cves/2024/CVE-2024-43917.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.