Add module for TI WooCommerce Wishlist SQL Injection (CVE-2024-43917)

[Chocapikk]

Hello Metasploit Team,

This PR introduces a new auxiliary module that exploits an unauthenticated SQL injection vulnerability in the TI WooCommerce Wishlist plugin for WordPress (versions <= 2.8.2). The vulnerability allows attackers to execute SQL queries via the order parameter. The module uses Msf::Exploit::Remote::HTTP::Wordpress::SQLi, which I integrated for handling SQL injections, though it has not yet been merged into the main framework.

Thank you for your review!

[cgranleese-r7]

Adding the blocked label for now until the mixin is merged as this PR requires it.

[jheysel-r7]

Release Notes

This adds a new auxiliary module that exploits an unauthenticated SQL injection vulnerability in the TI WooCommerce Wishlist plugin for WordPress (versions <= 2.8.2). The vulnerability allows attackers to execute SQL queries via the order parameter which can be used to dump usernames and their hashed passwords.