CVE-2024-13234 is an SQL Injection vulnerability in the Product Table for WooCommerce by WBW plugin for WordPress. The issue arises from improper neutralization of special elements in the 'additionalCondition' parameter, which is insufficiently escaped and not properly prepared in SQL queries. This allows unauthenticated attackers to append malicious SQL code to existing queries, potentially exposing sensitive data from the database. The vulnerability affects all versions up to and including 2.1.2. The CVSS 3.1 base score is 7.5, indicating a high severity with network attack vector, no privileges required, and no user interaction needed. There is no vendor advisory or patch information available to confirm remediation status.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information from the database without requiring authentication. The integrity and availability of the system are not impacted according to the CVSS vector. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting access to the affected plugin's functionality that uses the 'additionalCondition' parameter. Avoid using untrusted input in this parameter. Monitor vendor channels for updates and apply patches promptly once released.