CVE-2024-33559

published 2024-04-29

CVE-2024-33559: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore allows SQL Injection.This issue affects…

Priority P2 70 critical 9.3 CVSS 3.1

AV N AC L PR N UI N S C C H I N A L

EXPLOIT

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore allows SQL Injection.This issue affects XStore: from n/a through 9.3.5.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
8theme	xstore	n/a – 9.3.5	—

Detection & IOCs extracted from sources · hover to see the quote

url /?s=%27%3B+SELECT+*+FROM+wp_posts%3B+--↗

command SELECT * FROM wp_posts↗

• → Monitor HTTP POST requests to the search endpoint (?s=) containing URL-encoded SQL metacharacters such as %27 (single quote), %3B (semicolon), and SQL keywords (SELECT, FROM, --). ↗
• → The SQLi payload is injected via the WordPress search parameter 's'; inspect and alert on values containing stacked query patterns ('; SELECT ... --) in the 's' GET/POST parameter. ↗

• · The vulnerability affects the XStore WordPress theme through version 9.3.5 per NVD; ensure the theme is updated beyond this version. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89