Sql injection

2023-02-1717:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

wordpress

wp coder plugin

time-based

version 2.5.3

insufficient escaping

user supplied parameter

administrative privileges

sensitive information

database

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.8%

JSON

The WP Coder – add custom html, css and js code plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with administrative privileges to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

CPENameOperatorVersion
wp_coderle2.5.3

CPE	Name	Operator	Version
	wp_coder	le	2.5.3

References

plugins.trac.wordpress.org/changeset?old=2757782&old_path=wp-coder%2Ftrunk%2Fadmin%2Fpartials%2Finclude-data.php&new=&new_path=wp-coder%2Ftrunk%2Fadmin%2Fpartials%2Finclude-data.php

www.wordfence.com/threat-intel/vulnerabilities/id/e4b6a9cd-4d29-4bd8-afa3-b5d455ad8340