WP Custom Cursors < 3.2 - Admin+ SQLi

2023-05-2400:00:00

Chien Vuong

wordpress sql injection admin

0.001 Low

EPSS

Percentile

26.2%

JSON

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin.

1. Add a new "WP Custom Cursor".

2. Return to the "WP Custom Cursors" page and click edit Cursor.

3.The WP Custom Cursors plugin was vulnerable to SQL Injection in GET /wp-admin/admin.php?page=wpcc_add_new&edit_row=(select*from(select(sleep(20)))a)

0.001 Low

EPSS

Percentile

26.2%

JSON

Related for WPEX-ID:6666688E-7239-4D40-A348-307CF8F3B657