Back to Database
Status published
High
CVE-2024-43942
WordPress Greenshift Query and Meta Addon plugin < 3.9.2 - Subscriber+ SQL Injection vulnerability
Vulnerability Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wpsoul Greenshift Query and Meta Addon allows SQL Injection.This issue affects Greenshift Query and Meta Addon: from n/a before 3.9.2.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-43942
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Dave Jong (Patchstack)
More from Wpsoul
View All →CVE-2024-43943
WordPress Greenshift Woocommerce Addon plugin < 1.9.8 - Subscriber+ SQL Injection vulnerability
High
8.5
CVE-2024-35765
WordPress Greenshift – animation and page builder blocks plugin <= 8.8.9.1 - Cross Site Scripting (XSS) vulnerability
Medium
6.5
CVE-2024-34574
WordPress Table Maker plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability
Medium
5.9
CVE-2023-22707
WordPress Greenshift – animation and page builder blocks Plugin <= 4.9.9 is vulnerable to Cross Site Scripting (XSS)
Medium
5.9
Affected Vendor
Wpsoul
View all reports →Affected Software
Greenshift Query and Meta Addon
Vulnerable Versions:
Unknown
Timeline
Official Publish:
August 29th, 2024
Last Modified:
April 28th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L