CVE-2021-25076

Опубликовано: 24 янв. 2022

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Средний

Описание

The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to an SQL injection. Due to the lack of sanitisation and escaping, this could also lead to Reflected Cross-Site Scripting

Ссылки

http://packetstormsecurity.com/files/166071/WordPress-WP-User-Frontend-3.5.25-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://plugins.trac.wordpress.org/changeset/2648715
Patch
Third Party Advisory
https://wpscan.com/vulnerability/6d3eeba6-5560-4380-a6e9-f008a9112ac6
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/166071/WordPress-WP-User-Frontend-3.5.25-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://plugins.trac.wordpress.org/changeset/2648715
Patch
Third Party Advisory
https://wpscan.com/vulnerability/6d3eeba6-5560-4380-a6e9-f008a9112ac6
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wedevs:wp_user_frontend:*:*:*:*:*:wordpress:*:*

Версия до 3.5.26 (исключая)

EPSS

Процентиль: 98%

0.49618

Средний

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-gx4g-7h78-x658