This vulnerability (CVE-2024-43943) in the Wpsoul Greenshift Woocommerce Addon is classified under CWE-89, indicating improper neutralization of special elements used in SQL commands, commonly known as SQL Injection. It affects versions prior to 1.9.8 of the addon. The CVSS 3.1 score is 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L), meaning it can be exploited remotely over the network with low attack complexity and requires low privileges but no user interaction. The impact includes high confidentiality loss and low availability impact. No official patch or remediation level has been published by the vendor or authoritative sources yet.

Successful exploitation could allow an attacker with low privileges to execute arbitrary SQL commands on the backend database, leading to high confidentiality impact such as unauthorized data disclosure. The integrity impact is not indicated, and availability impact is low. There are no known active exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected addon and monitor for unusual database activity. Avoid exposing the vulnerable component to untrusted networks if possible.