High · 8.5 CVE-2024-43942 EUVD-2024-40591GHSA-9qq7-2j28-46rv

WordPress Greenshift Query and Meta Addon plugin < 3.9.2 - Subscriber+ SQL Injection vulnerability

Published Aug 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: wpsoul Product: Greenshift Query and Meta Addon

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wpsoul Greenshift Query and Meta Addon allows SQL Injection.This issue affects Greenshift Query and Meta Addon: from n/a before 3.9.2.

Affected products

Vendor	Product	Affected	Fixed
Wpsoul	Greenshift Query and Meta Addon	< 3.9.2	3.9.2

References

https://patchstack.com/database/vulnerability/greenshiftquery/wordpress-greenshift-query-and-meta-addon-plugin-3-9-2-subscriber-sql-injection-vulnerability?_s_id=cve vdb-entry