The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the data_target parameter before it is being interpolated in an SQL statement and then executed via the rating_vote AJAX action (available to both unauthenticated and authenticated users), leading to an SQL Injection.
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/05eab45d-ebe9-440f-b9c3-73ec40ef1141 | Exploit Third Party Advisory |
https://wpscan.com/vulnerability/05eab45d-ebe9-440f-b9c3-73ec40ef1141 | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 06:39
Type | Values Removed | Values Added |
---|---|---|
References | () https://wpscan.com/vulnerability/05eab45d-ebe9-440f-b9c3-73ec40ef1141 - Exploit, Third Party Advisory |
04 May 2022, 13:59
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:usersultra:users_ultra:*:*:*:*:*:wordpress:*:* | |
References | (MISC) https://wpscan.com/vulnerability/05eab45d-ebe9-440f-b9c3-73ec40ef1141 - Exploit, Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
25 Apr 2022, 16:30
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-04-25 16:16
Updated : 2024-11-21 06:39
NVD link : CVE-2022-0769
Mitre link : CVE-2022-0769
CVE.ORG link : CVE-2022-0769
JSON object : View
Products Affected
usersultra
- users_ultra
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')