CVE-2024-1071-Docker

使用 Docker 搭建 CVE-2024-1071 漏洞环境 🎯 想要练习新的 WordPress CVE 吗？请按照以下说明操作。 搭建实验环境 1. 安装 Docker：https://docs.docker.com/get-docker/ 2. 克隆项目：git clone https://github.com/Trackflaw/CVE-2024-1071-Docker.git。 3. 进入项目目录：cd CVE-2024-1071-Docker 4. 启动 Docker Compose 文件：docker compose up -d。 5. 使用 root:root 凭据连接...

Exploit for SQL Injection in Ultimatemember Ultimate_Member

WordPress CVE 2024-1071 SQL Exploit !1713786351923https://...

Exploit for SQL Injection in Ultimatemember Ultimate_Member

CVE-2024-1071 CVE-2024-1071 Ultimate Member Unauthor...

CVE-2024-1071

The Ultimate Member plugin for WordPress (versions 2.1.3 to 2.8.2 ) is vulnerable to SQL Injection via the sorting parameter. The root cause is insufficient escaping of user-supplied input and a lack of proper preparation on existing SQL queries. This allows unauthenticated attackers to append ad...

Imperva Customers are Protected Against New SQL Injection Vulnerability in WordPress Plugin

A critical security flaw, identified as CVE-2024-1071, was discovered in the Ultimate Member plugin for WordPress, affecting over 200,000 active installations. This vulnerability has a high severity CVSS score of 9.8 and allows for SQL injection via the sorting parameter due to insufficient input...

Exploit for SQL Injection in Ultimatemember Ultimate_Member

CVE-2024-1071 Ultimate Member Unauthorized Database Access...

WordPress Plugin Alert - Critical SQLi Vulnerability Threatens 200K+ Websites

A critical security flaw has been disclosed in a popular WordPress plugin called Ultimate Member that has more than 200,000 active installations. The vulnerability, tracked as CVE-2024-1071, carries a CVSS score of 9.8 out of a maximum of 10. Security researcher Christiaan Swiers has been credite...

WordPress Ultimate Member Plugin 2.1.3-2.8.2 is vulnerable to SQL Injection

Software Ultimate Member Type Plugin Vulnerable versions 2.1.3-2.8.2 Fixed in 2.8.3 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-1071 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID d52d7ae096c8 Credits Christiaan Swiers Required privilege...

WordPress Ultimate Member SQL Injection (CVE-2024-1071)

The Ultimate Member plugin for WordPress up to version 2.8.2 is vulnerable to SQL injection via the 'sorting' parameter. This allows unauthenticated attackers to exploit blind SQL injections and extract sensitive information from the database. Module Options msf use...